3-Hour Live DFIR Workshop
Placing the Suspect Behind the Prompt
$99 USD
Early registration ends September 10.
Regular price: $147.
Final-week price: $199 starting October 14.
AI has changed the attribution problem. Finding a prompt, an AI account, or AI-generated output does not establish who actually caused the activity.
This live workshop shows you how to investigate the connections between the person, device, account, session, prompt, AI activity, action, and result, and how to identify the gaps before you reach an attribution conclusion.
October 20, 2026 • Live Online • 3 Hours • Includes a copy of DFIR Investigative Mindset book
Register for $99Your workshop fee can be credited 100% toward PSBK CASEWORK and 100% toward PSBK INVESTIGATIVE MINDSET when you enroll within 7 days after the workshop.
AI Added New Links to the Attribution Chain
Digital forensics has long focused on placing the suspect behind the keyboard. AI complicates that problem. Investigators may now have to connect a person to a device, user profile, AI account, session, prompt, agent activity, tool calls, actions, and results.
Each connection requires evidence. A prompt does not automatically prove who wrote it, authorized it, controlled it, or caused the result.
This workshop focuses on how to identify those connections, test them, document them, and explain what the evidence actually supports.
What You Will Learn
Workshop Agenda
BUILD THE CONNECTION
Trace how the person, device, account, session, prompt, and resulting activity connect and identify the evidence that supports each attribution link.
FIND THE GAP
Spot where attribution turns into assumption, identify weak or missing links, and determine what additional evidence could confirm or contradict them.
DEFEND THE CONCLUSION
Separate fact from inference, test competing explanations, and present an attribution conclusion that can withstand review, deposition, or testimony.
More Than a $99 Workshop
Includes DFIR Investigative Mindset
Plus, if you enroll within 7 days after the workshop:
$59.99 retail value (DFIR Investigative Mindset)
$99 credit toward PSBK CASEWORK COURSE
$99 credit toward PSBK INVESTIGAIVE MINDSET COURSE
Up to $257.99 in book and tuition-credit value
What DFIR Practitioners Say About PSBK Training
"One of the most practically grounded forensic training experiences I’ve completed. It provides a structured, legally defensible method for moving from device and account to person or being clear when that bridge can’t be crossed."
"This course takes you from being just an analyst to thinking about the entire process of attribution to a specific person. It reinforces the importance of thorough analysis and investigation to justify, explain, and defend your conclusions."
“This is by far the best course I have attended on investigative skills, specifically attribution. It forces you to think about what you are reporting and why, and to be able to rationally defend it. It made me a better analyst and investigator.”
