PSBK CASEWORK is a live, scenario-based DF/IR lab where you work through one case, make investigative decisions, build a defensible timeline and explain what the evidence actually supports.
PSBK CASEWORKÂ |Â 7.5 CPE Credits
 July 28, 2026  |  8:30AM-4:00PM Pacific time
Turn Tool Output into Defensible Casework.
Includes 30-day replay after the class.
Register for CASEWORK$599, one day to change everything
00
DAYS
00
HOURS
00
MINS
00
SECS
"Brett Shavers' Placing the Suspect Behind the Keyboard is one of the most practically grounded forensic training experiences I've completed." - Kenneth H.
Finding artifacts is not the same thing as proving what happened.
- Tool output is not a conclusion.
- Timelines do not explain intent by themselves.
- Reports fail when conclusions are weak.
- Digital evidence still requires reasoning, context, and explanation.
- CASEWORK gives you the framework to translate raw tool output into a defensible case.
This class is built for practitioners who need to explain what the evidence actually supports to command staff, HR, executives, attorneys, opposing experts, or a jury.
Here is what students say CASEWORK changed in their investigative work.
These are comments from prior CASEWORK students.
 "This is by far the best course I have attended on investigative skills, specifically attribution."
"It made me a better analyst and investigator having a practitioner role in all my cases."
 "This course was helpful to induce stress and ambiguity to simulate making decisions."
"This course takes you from being just an analyst to thinking about the entire process of attribution to a specific person."
"DFIR professionals, regardless of their roles within the team, should actively participate in casework to help structure and optimize workflows."
"...develops a range of invaluable skills and processes which will definitely be put to use immediately."
The framework to make sense of your tool outputs.
You will work through a live scenario, make investigative decisions, test competing explanations, and explain what the evidence supports.
It applies to criminal cases, civil matters, corporate investigations, HR cases, eDiscovery, and incident response matters where the outcome may be challenged.
If you already know how to collect artifacts, this class teaches what comes next.
- Scenario-based, investigative DFIR training.
- Built to turn raw data into a prosecutable timeline.
- Focused on defensible conclusions.
- Designed for real-world case thinking.
- Built to improve how you explain evidence.
- Structured around evidence, interpretation, timelines, and conclusions.
- Designed for criminal, civil, corporate, and incident response investigations.
If you already know how to collect artifacts, this class teaches what comes next.
What You’ll Learn
During the day, we’ll cover:
- How to separate evidence from interpretation.
- How to connect findings to human decisions.
- How to test competing explanations.
- How to explain findings in plain language.
- How to write reports that survive scrutiny.
- How to think through incomplete or conflicting facts.
By the end of the day, you’ll not only know the system; you’ll have practiced it live, applied investigative strategies, and seen how it scales across domains.
Register for CASEWORKWhat You’ll Get with Your Enrollment
- Live one-day CASEWORK training.
- Scenario-based exercises.
- Instructor-led analysis.
- Practical investigative framework.
- Class materials.
- Formal Certificate of Completion detailing 7.5 Hours of Continuing Professional Education (CPE) credits for your HR department or certifying body.
✨Your CASEWORK registration includes one printed copy of PSBK DF/IR Investigative Strategies, Vol. 3 when it is published.
Vol. 3 is the course companion for CASEWORK. It expands on the investigative strategy, attribution, case-building, timeline, and report-thinking concepts used during the live training.
The book is not yet available for retail purchase. CASEWORK students will receive access first when it is released.
U.S. shipping is included. International shipping will be billed separately before shipment. No publication date is guaranteed.
Course Agenda
This course is designed as an immersive, modular experience. The schedule is optimized for in-depth discussion and real-world investigative simulation.
The number of decision gates (typically 5, but ranging between 4 and 6) will adjust dynamically based on student decision-making, ensuring every participant fully explores the implications of their investigative path.
Introduction and Rules of the Road
Setting the stage for the scenario and defining the ground rules for a successful investigation.
The FACT Framework
Mastering the core methodology used to ensure your conclusions are defensible and withstand rigorous scrutiny.
Decision-Gate Modules
Applying the framework in a live, evolving scenario. Students rotate through key roles (Supervisor, Legal, Evidence Tech, Forensic Analyst, and Investigator) to gain a multi-perspective understanding of the case.
Post-Gate Analysis & Debriefs
Following each decision gate, we conduct a deep-dive review of investigative plans, discuss alternative strategies, and analyze the direct consequences of your team’s decisions.
Lunch Break
Advanced Investigative Topics and Report Thinking
Ongoing lectures interspersed throughout the day focusing on critical forensic methodologies and advanced analytical techniques.
Final Lecture & Course Wrap-up
Synthesis of learning, final Q&A, and concluding the path to a defensible case.
I’ve defended this system under cross-examination.
Then I built it so you won’t have to.
Secure your seat.
DATE:Â July 28, 2026
TIME: 8:30AM - 4:00PM Pacific Time
Live Online
$599 Registration
Register for CASEWORKWhy learn from Brett Shavers
Brett Shavers has spent more than 30 years in investigations, digital forensics, the courtroom, and the classroom. His work focuses on helping investigators, responders, and legal teams turn digital evidence into defensible case conclusions.Creator of Placing the Suspect Behind the Keyboard® series.
-
Instructor to thousands across law enforcement, military, and corporate.
-
Courtroom experience as an expert witness, rebuttal witness, lay witness, special master, advisor, juror, bailiff, and pro se plaintiff.
That means he doesn’t just teach casework. He’s defended it under cross-examination, seen how cases collapse, and built a system designed so yours won’t.
Where investigators get stuck.
The PSBK Casework System began in criminal forensics, but its structure applies anywhere evidence, decisions, and outcomes must be defensible:
- Multiple suspects use the same device.
- Artifacts conflict with witness statements.
- Timeline evidence doesn't match the allegation.
- The data tells several possible stories.
This is where CASEWORK helps.
Why I Built the PSBK Casework System
I didn’t design this system in theory. I built it in the stress of real investigations (meaning I suffered through investigative failures, cross examinations, defending my work, ideas, theories, and methods) and defended it in courtrooms where case outcomes mattered.
The PSBK Casework System is the result: a process that makes your work defensible from every angle, regardless if your work is a criminal or civil legal case, an eDiscovery matter, a corporate matter, or an IR event that is at risk of litigation.
Who is this course for?
Who is this course not for?
Will I receive a certificate?
When will the book be ready?
Is this beginner friendly?
Is this course recorded?
00
DAYS
00
HOURS
00
MINS
00
SECS
PSBK Casework Course · FACT Attribution Framework™ · DF/IR Investigative Strategies™
© 2026 Brett Shavers. All Rights Reserved.
Placing the Suspect Behind the Keyboard®, PSBK™, and FACT Attribution Framework™ are trademarks of Brett Shavers.
No portion of this course, website, or training materials may be reproduced, distributed, or transmitted without written permission.
This training is provided for educational purposes only and does not constitute legal advice or expert testimony.
Follow PSBK
X · LinkedIn · Facebook · Instagram
