⏰ Early Bird Registration ends February 5 | Save $200 + Get the Exclusive Hardcover Edition Free
1-day live online • built for practitioners wanting the investigative edge
$399 until Feb 6 • pick Feb 11 or Feb 21.
Register Now – Save $200 + Get the Hardcover Free. Join 20 others who've already enrolled.LIVE ONLINE; Choice of two dates.
DATE: Feb 11, 2026 TIME: 9:30AM-5PM Pacific
or
DATE: Feb 21, 2026 TIME: 9:30AM-5PM Pacific
Choose your date. Same course, same system.
Get the book, and learn how to build cases that hold up, including finding trap-loaded evidence that can wreck your analysis and investigation.
30-day replay. You can't lose.
Stop chasing tools. Start closing cases.
Use investigative logic to turn forensic evidence into defensible casework.
Here’s how the PSBK Casework Course changes how you work.
The Problem
Most investigators rely on tools and talent but without a system, cases are weak.
-
Reports lack consistency.
-
Evidence gets lost in noise.
-
Misconfigured timestamps that destroy timelines.
-
Overbroad warrants that get evidence suppressed.
-
Shared IP logins that mislead attribution.
The problem isn’t your skill. It’s the absence of a system.
The Solution
The PSBK Casework System is built on the FACT Attribution Framework™:
-
Forensic Compliance: preserve admissibility, follow lawful authority.
-
Analyze Evidence: digital + physical, context-driven.
-
Correlate & Sequence: build timelines, relationships, and attribution logic.
-
Testify & Transfer Findings: communicate results that survive cross-exam.
You’ll apply FACT to a live scenario, building a full case binder that includes warrants, logs, timelines, reports, and testimony-ready findings.
The Transformation
Imagine walking away not with theory, but with a completed DFIR case binder:
-
Corrected warrants that don’t get tossed.
-
Chain of custody and acquisition logs that hold up in court.
-
A timeline that resolves conflicting artifacts.
-
A method to spot fragile points in your own cases.
-
Confidence your work can survive suppression hearings and cross-exam.
-
An attribution statement that neutralizes the “anyone could’ve used it” defense.
That’s what you’ll have in your hands by the end of this one-day course a system that works.
Why learn from Brett Shavers
Brett Shavers has spent over 30 years in investigations, the courtroom, and the classroom. His work has shaped how investigators, incident responders, and legal teams approach defensible casework.
-
30+ years in investigations and courtroom testimony.
-
Creator of Placing the Suspect Behind the Keyboard® series.
-
Instructor to thousands across LE, military, and corporate.
-
Courtroom experience as an expert witness, rebuttal witness, special master, advisor, juror, bailiff, and more.
Brett has personally served in over 70% of the active roles inside a courtroom, from juror to expert witness, from bailiff to special master.
That means he doesn’t just teach casework. He’s defended it under cross-examination, seen how cases collapse, and built a system designed so yours won’t.
Learn the PSBK Casework System from Brett
Tools don’t close cases.
Certifications don’t close cases.
Systems close cases.
The PSBK Casework System gives you the structure, the flow, and the confidence to turn evidence into outcomes, every time.
Join the One-Day Casework Intensive
What You’ll Get with Your Enrollment
📘 Placing the Suspect Behind the Keyboard: DF/IR Investigative Strategies (Vol. 3, Standard Edition)
-
Complimentary, early release hardcover copy (not available retail), included free with your seat
-
Step-by-step case scenario
-
Legal insights and evidentiary strategy
-
Preview of the companion narrative (Vol. 4)
🎓 Full Training Package
-
7-hour live online training + interactive Q&A with Brett Shavers
-
Casework workbook + downloadable forms
-
30-day replay access
-
Certificate of Completion
✨ Bonus: You’ll be among the first to get PSBK Vol. 3 – Standard Edition before public release.
Lock In My Spot Before It's Too Late!What You’ll Learn in the PSBK Casework Course
This isn’t a theory lecture. It’s a live, interactive training where you’ll practice tactical decision-making, connect evidence into a coherent story, and build defensible casework that holds up under scrutiny.
During the day, we’ll cover:
-
The Casework Mindset – how to think like both a DFIR professional and a legal professional when making investigative decisions.
-
Evidence in Context – tying artifacts together into narratives that point to people, not just events.
-
Attribution Thinking – proving who did something, not just what happened. Tying the act to the actor.
-
Building the Case File – turning raw data into clear, defensible reports that withstand cross-examination.
-
Tactical Application – applying the PSBK Casework System to real scenarios, making live decisions, and discussing specific investigative techniques that demonstrate broader investigative strategies.
-
From Casework to Courtroom – what attorneys, judges, and juries look for and how to present cases that hold in any setting: criminal, corporate, civil, or eDiscovery.
By the end of the day, you’ll not only know the system; you’ll have practiced it live, applied investigative strategies, and seen how it scales across domains.
Tactical Forensics in Action
This isn’t a paperwork course. It’s a live, investigative lab.
During the PSBK Casework Course, you’ll walk through the same digital forensic techniques used to prove attribution and intent in real cases. You’ll see how individual artifacts become evidence and how evidence becomes a defensible case.
We’ll examine, demonstrate, and connect live forensic data points, including:
-
System Evidence: LNKs, shellbags, registry traces.
-
Network Evidence: logs, metadata, correlated timelines.
-
Reporting: how findings become affidavit + testimony.
You’ll see how artifacts plug into the system that makes your work defensible. This is where technical skill meets investigative strategy.
One System.
Multiple Applications.
The PSBK Casework System began in criminal forensics, but its structure applies anywhere evidence, decisions, and outcomes must be defensible:
-
Criminal Investigations → affidavits, reports, testimony that survive cross-examination.
-
Incident Response → timelines, attribution, and reporting regulators and boards trust.
-
eDiscovery & Civil Litigation → defensible collections, privilege boundaries, and reporting.
-
Corporate / HR Investigations → connect evidence to actions with clarity and neutrality.
Different domains. Same system. Same defensibility.
Why I Built the PSBK Casework System
I didn’t design this system in theory. I built it in the stress of real investigations (meaning I suffered through investigative failures, cross examinations, defending my work, ideas, theories, and methods) and defended it in courtrooms where case outcomes mattered.
The PSBK Casework System is the result: a process that makes your work defensible from every angle, regardless if your work is a criminal or civil legal case, an eDiscovery matter, a corporate matter, or an IR event that is at risk of litigation.
Master Casework Across Civil, Criminal, Corporate, and IR cases.
What Students Say About PSBK Training
These quotes are from graduates of the PSBK Mindset course. The Casework System is built with the same clarity, defensibility, and practical application.
Jason J.
"Reinforcing a holistic investigative approach to digital forensics."
Chad H.
"Changing the way I think when looking at a case."
Jac S.
"Has already provided benefits in my day job."
Early Bird Registration – $399 (Reg. $599)
Time to register and early-release books are limited.
Early Bird pricing ends Feb 5, 2026.
Join the One-Day Casework Intensive”Who is this course for?
Do I need prior PSBK training or books?
Will I receive a certificate?
What if I already pre-ordered the book?
Is this beginner friendly?
Is this course recorded?
I’ve defended this system under cross-examination.
Then I built it so you won’t have to.”
Secure My Spot – Early Bird $399The Book
A limited number of books will be available for this early release and CASEWORK course.
The Course
Limited time to match the limited books. Once registration closes, it's too late.
Payment
Pay in full with PayPal or major credit cards or pay over time.
PSBK Casework Course · FACT Attribution Framework™ · DF/IR Investigative Strategies™
© 2025-2026 Brett Shavers. All Rights Reserved.
Placing the Suspect Behind the Keyboard®, PSBK™, CASE Framework™, and FACT Attribution Framework™ are trademarks of Brett Shavers.
No portion of this course, website, or training materials may be reproduced, distributed, or transmitted without written permission.
This training is provided for educational purposes only and does not constitute legal advice or expert testimony.
Quick Links
PSBK Home · About Brett Shavers · DFIR.Training · Contact
Follow PSBK
X (Twitter) · LinkedIn · Facebook · Instagram