LIVE ONLINE
 2 classes completed in Feb 2026; both were at full capacity.
Early bird pricing: $399
(Regular rate $599, within 20 days prior to start date)
DATES
April 22, 2026Â Â |Â 9:30AM-5:30PM Eastern time
May 27, 2026Â Â |Â Â 9:30AM-5:30PM Pacific time
May 28, 2026Â Â |Â Â 9:30AM-5:30PM Pacific time
Get the book, and learn how to build cases that hold up, including finding trap-loaded evidence that can wreck your analysis and investigation.Â
30-day replay. You can't lose.
Hereâs how the PSBK Casework Course changes how you work.
Why learn from Brett Shavers
Brett Shavers has spent over 30 years in investigations, the courtroom, and the classroom. His work has shaped how investigators, incident responders, and legal teams approach defensible casework.
-
30+ years in investigations and courtroom testimony.
-
Creator of Placing the Suspect Behind the KeyboardÂŽ series.
-
Instructor to thousands across LE, military, and corporate.
-
Courtroom experience as an expert witness, rebuttal witness, special master, advisor, juror, bailiff, and more.
Brett has personally served in over 70% of the active roles inside a courtroom, from juror to expert witness, from bailiff to special master.
That means he doesnât just teach casework. Heâs defended it under cross-examination, seen how cases collapse, and built a system designed so yours wonât.
Tools donât close cases.
Certifications donât close cases.
Systems close cases.
The PSBK Casework System gives you the structure, the flow, and the confidence to turn evidence into outcomes, every time.
What Youâll Get with Your Enrollment
đ Placing the Suspect Behind the Keyboard: DF/IR Investigative Strategies (Vol. 3, Standard Edition)
-
Complimentary, early release hardcover copy (not available retail), included free with your seat
-
Step-by-step case scenario
-
Legal insights and evidentiary strategy
-
Preview of the companion narrative (Vol. 4)
đ Full Training Package
-
7-hour live online training + interactive Q&A with Brett Shavers
-
Casework workbook + downloadable forms
-
30-day replay access
-
Certificate of Completion
⨠Bonus: Youâll be among the first to get PSBK Vol. 3 â Standard Edition before public release.
What Youâll Learn in the PSBK Casework Course
This isnât a theory lecture. Itâs a live, interactive training where youâll practice tactical decision-making, connect evidence into a coherent story, and build defensible casework that holds up under scrutiny.
During the day, weâll cover:
-
The Casework Mindset â how to think like both a DFIR professional and a legal professional when making investigative decisions.
-
Evidence in Context â tying artifacts together into narratives that point to people, not just events.
-
Attribution Thinking â proving who did something, not just what happened. Tying the act to the actor.
-
Building the Case File â turning raw data into clear, defensible reports that withstand cross-examination.
-
Tactical Application â applying the PSBK Casework System to real scenarios, making live decisions, and discussing specific investigative techniques that demonstrate broader investigative strategies.
-
From Casework to Courtroom â what attorneys, judges, and juries look for and how to present cases that hold in any setting: criminal, corporate, civil, or eDiscovery.
By the end of the day, youâll not only know the system; youâll have practiced it live, applied investigative strategies, and seen how it scales across domains.
Tactical Forensics in Action
This isnât a paperwork course. Itâs a live, investigative lab.
During the PSBK Casework Course, youâll walk through the same digital forensic techniques used to prove attribution and intent in real cases. Youâll see how individual artifacts become evidence and how evidence becomes a defensible case.
Weâll examine, demonstrate, and connect live forensic data points, including:
-
System Evidence: LNKs, shellbags, registry traces.
-
Network Evidence: logs, metadata, correlated timelines.
-
Reporting: how findings become affidavit + testimony.
Youâll see how artifacts plug into the system that makes your work defensible.  This is where technical skill meets investigative strategy.
One System.
Multiple Applications.
The PSBK Casework System began in criminal forensics, but its structure applies anywhere evidence, decisions, and outcomes must be defensible:
-
Criminal Investigations â affidavits, reports, testimony that survive cross-examination.
-
Incident Response â timelines, attribution, and reporting regulators and boards trust.
-
eDiscovery & Civil Litigation â defensible collections, privilege boundaries, and reporting.
-
Corporate / HR Investigations â connect evidence to actions with clarity and neutrality.
Different domains. Same system. Same defensibility.
Why I Built the PSBK Casework System
I didnât design this system in theory. I built it in the stress of real investigations (meaning I suffered through investigative failures, cross examinations, defending my work, ideas, theories, and methods) and defended it in courtrooms where case outcomes mattered.
The PSBK Casework System is the result: a process that makes your work defensible from every angle, regardless if your work is a criminal or civil legal case, an eDiscovery matter, a corporate matter, or an IR event that is at risk of litigation.
What Students Said about PSBK CASEWORK
These quotes are from graduates of the PSBK CASEWORK course.Â
 "Validated my thoughts and approach to problem solving."
"I learned from the team I was with."
"The course itself is awesome."
 "This course was helpful to induce stress and ambiguity to simulate making decisions."
"DFIR professionals, regardless of their roles within the team, should actively participate in casework to help structure and optimize workflows."
"...develops a range of invaluable skills and processes which will definitely be put to use immediately."
Do you believe your investigative CASEWORK ability will improve because of this class?
100%! All students who completed the survey answered "Yes".
Who is this course for?
Do I need prior PSBK training or books?
Will I receive a certificate?
What if I already pre-ordered the book?
Is this beginner friendly?
Is this course recorded?
Iâve defended this system under cross-examination.
Then I built it so you wonât have to.â
The Book
A limited number of books will be available for the CASEWORK course.
The Course
Limited time to match the limited books. Once registration closes, it's too late.
Payment
Pay in full with PayPal or major credit cards or pay over time.
PSBK Casework Course ¡ FACT Attribution Framework⢠¡ DF/IR Investigative Strategiesâ˘
Š 2025-2026 Brett Shavers. All Rights Reserved.
Placing the Suspect Behind the KeyboardÂŽ, PSBKâ˘, CASE Frameworkâ˘, and FACT Attribution Framework⢠are trademarks of Brett Shavers.
No portion of this course, website, or training materials may be reproduced, distributed, or transmitted without written permission.
This training is provided for educational purposes only and does not constitute legal advice or expert testimony.
Quick Links
PSBK Home ¡ About Brett Shavers ¡ DFIR.Training ¡ Contact
Follow PSBK
X (Twitter) ¡ LinkedIn ¡ Facebook ¡ Instagram