THE AI DID IT. PROVE WHO CAUSED IT.
3-Hour Live DFIR Workshop
Placing the Suspect Behind the Prompt
$99 USD
Early registration ends October 17.
Regular price: $149.Â
Final-week price: $199 starting November 10.
November 17, 2026 • Live Online • 3 Hours • Includes a copy of DFIR Investigative Mindset book
Register for $99Taught live by Brett Shavers, former detective, task force officer, digital forensics practitioner, and author of the Placing the Suspect Behind the Keyboard series and DFIR Investigative Mindset.
3 CPE credits• Live Training • 72-Hour Replay • DFIR Investigative Mindset Book Included • Up to $198 in PSBK Course Credits
Go from finding AI activity to making a defensible human-attribution conclusion.
By the end of this workshop, you will be able to trace the evidentiary path from person to device, account, session, instruction, agent activity, action, and result, and determine exactly where the evidence supports attribution, where it weakens, and where it stops.Â
AI places another layer between Act and Actor.
00
DAYS
00
HRS
00
MINS
00
SECS
AI Added New Links to the Attribution Chain
Digital forensics has long focused on placing the suspect behind the keyboard. AI complicates that problem. Investigators may now have to connect a person to a device, user profile, AI account, session, prompt, agent activity, tool calls, actions, and results.
Each connection requires evidence. A prompt does not automatically prove who wrote it, authorized it, controlled it, or caused the result.
This workshop focuses on how to identify those connections, test them, document them, and explain what the evidence actually supports.
What You Will Learn
Workshop Agenda
BUILD THE CONNECTION
Trace how the person, device, account, session, prompt, and resulting activity connect and identify the evidence that supports each attribution link.
FIND THE GAP
Spot where attribution turns into assumption, identify weak or missing links, and determine what additional evidence could confirm or contradict them.
DEFEND THE CONCLUSION
Separate fact from inference, test competing explanations, and present an attribution conclusion that can withstand review, deposition, or testimony.
Your registration Includes More Than the Workshop
Includes DFIR Investigative Mindset
Plus, if you enroll within 7 days after the workshop:
* $59.99 retail value (DFIR Investigative Mindset)
* 100% of your registration credited toward PSBK CASEWORK COURSE
* 100% of your registration credited toward PSBK INVESTIGAIVE MINDSET COURSE
* Up to $257.99 in book and tuition-credit value
What DFIR Practitioners Say About PSBK Training
"One of the most practically grounded forensic training experiences I’ve completed. It provides a structured, legally defensible method for moving from device and account to person or being clear when that bridge can’t be crossed." - Digital Forensics Examiner, Past Workshop Alumni
"This course takes you from being just an analyst to thinking about the entire process of attribution to a specific person. It reinforces the importance of thorough analysis and investigation to justify, explain, and defend your conclusions."Â Â -Â Digital Forensics Examiner, Past Workshop Alumni
“This is by far the best course I have attended on investigative skills, specifically attribution. It forces you to think about what you are reporting and why, and to be able to rationally defend it. It made me a better analyst and investigator.”  - Digital Forensics Examiner, Past Workshop Alumni
About Brett Shavers
Brett Shavers has worked in digital forensics and investigations for more than 30 years, including law enforcement, private-sector investigations, expert work, and university instruction. He is the author of the Placing the Suspect Behind the Keyboard series and DFIR Investigative Mindset, with a focus on attribution, competing explanations, and defensible conclusions.
