The Missed Clue: Unlocking the Untapped Potential of IP Addresses in Crime Analysis

The Missed Clue: Unlocking the Untapped Potential of IP Addresses in Crime Analysis 

Rebecca Florhaug

Crime Analyst

Blaine Police Department,  Minnesota

In an increasingly digital world where offenders leave traces both online and offline, this session provides a practical, investigator-focused introduction to using IP address data in modern crime analysis.

Participants will learn what IP addresses are, how they work, and why they matter, along with real-world strategies for identifying suspects, mapping online activity to physical locations, and strengthening cases. The presentation covers key technical and legal foundations—including static versus dynamic IPs, ISP roles, retention challenges, natted IPs, and the use of subpoenas and search warrants—before transitioning into intermediate investigative techniques that show how IP data can be combined with other evidence such as surveillance, phone records, and warrant returns.

The session also briefly introduces advanced concepts like MAC address identification and router interrogation in complex cases. Real-world case examples demonstrate how these methods lead to successful investigative outcomes, and the session is designed for attendees with little to moderate technical experience, leaving them confident in using IP address data more effectively across a wide range of investigations.

Zoom Link - https://iaca-net.zoom.us/j/84712688575?pwd=P0acGP8WYc4B5kG3zZNcuX4QpbRFTS.1