Summary

Brett Shavers, author of 'Placing the Suspect Behind the Keyboard, Volume 2: DFR Investigative Mindset.' discusses the importance of an investigative mindset in digital forensics and the need to go beyond technical skills. Justin and Brett explore the concepts of perception versus perspective, critical thinking, and the importance of understanding principles rather than relying solely on tools.

This episode also touches on the topic of regulations in the DFIR field, highlighting the potential benefits of self-regulation and the risks of being over-regulated by those who lack understanding of DFIR. The conversation concludes with insights on balancing time and quality in investigations, the significance of note-taking, and the importance of engaging with educational resources.
 

Takeaways

• An investigative mindset is crucial in digital forensics and goes beyond technical skills.
• Perception is personal reality based on what is seen, felt, and biased, while perspective is a step back to see things from different angles.
• Biases can negatively impact investigations, and it is important to recognize and minimize them.
• Critical thinking is essential in forensic work and can be developed through scenario-based questions and problem-solving.
• Understanding principles and concepts is key, as tools are just means to an end.
• Minimizing risks and being open to exploring all ideas, even if they initially seem dumb, can lead to creative solutions. Collaboration and open-mindedness are crucial in DFIR, as diverse perspectives and unconventional ideas can lead to innovative solutions.
• Self-regulation in the DFIR field is important to avoid being over-regulated by those who lack understanding of DFIR.
• Balancing time and quality in investigations requires prioritizing cases based on their importance and mission.
• Note-taking is a valuable practice in DFIR as it helps with critical thinking, articulation, and staying on track during investigations.
• Engaging with educational resources, such as books, can enhance knowledge and skills in the DFIR field.

Chapters

00:00 Introduction and Background

01:14 The Importance of an Investigative Mindset

07:31 Recognizing and Minimizing Biases

09:34 The Role of Critical Thinking

25:31 Inspiration from Dumb Ideas

28:00 The Value of Diverse Perspectives

31:03 The Need for Self-Regulation

35:56 The Importance of Technical Skills and Legal Knowledge

47:04 The Role of Note-Taking in Critical Thinking