AFOSI Special Agent study materials
AFOSI Special Agent study resources

AFOSI Special Agent key terms

AFOSI Special Agent · Get comfortable with the vocabulary.

Chain of Custody

A documented, unbroken record of who handled, transferred, and stored evidence from seizure through trial, showing each person, date, and purpose so authenticity can be proven in court.

Related: Evidence Integrity, Best Evidence Rule
Evidence Integrity

The condition in which physical or digital evidence remains unaltered and unaltered-looking from collection to presentation, protected by sealing, hashing, controlled access, and documented handling procedures.

Related: Chain of Custody, Forensic Imaging
Forensic Imaging

Creating a bit-for-bit duplicate of a storage device or digital source, verified by hash values, so analysis occurs on a copy while the original stays preserved for court.

Related: Hash Value, Chain of Custody
Hash Value

A fixed-length digital fingerprint computed from file or device contents; any change produces a different value, so matching hashes demonstrate that evidence was not altered.

Related: Forensic Imaging, Evidence Integrity
Exigent Circumstances

Urgent conditions such as imminent destruction of evidence, hot pursuit, or danger to life that justify warrantless action where obtaining a warrant beforehand is reasonably impossible.

Related: Search Warrant, Plain View Doctrine
Search Warrant

A judge's written authorization, supported by sworn probable cause, permitting agents to search a described place or person and seize specified items within stated limits.

Related: Probable Cause, Exigent Circumstances
Probable Cause

A reasonable belief, grounded in specific articulable facts rather than suspicion or hunch, that a crime occurred and that evidence or contraband will be found in a particular place.

Related: Search Warrant, Affidavit
Affidavit

A written statement sworn under oath before an authorized official, commonly used to establish probable cause for a warrant and subject to challenge for omissions or falsehoods.

Related: Probable Cause, Search Warrant
Miranda Warning

The advisement of rights to silence and counsel required before custodial interrogation by government agents, whose absence generally bars use of resulting statements at trial.

Related: Custodial Interrogation, Voluntariness
Custodial Interrogation

Questioning by law enforcement of a person who is under formal arrest or restrained to a degree comparable to arrest, triggering the requirement for rights advisement.

Related: Miranda Warning, Voluntariness
Plain View Doctrine

The rule allowing warrantless seizure of items whose incriminating character is immediately apparent when an officer is lawfully present at the observation point.

Related: Exigent Circumstances, Consent Search
Consent Search

A warrantless search justified by voluntary permission from a person with authority over the area, revocable at any time and invalid if obtained by coercion or false claims of authority.

Related: Plain View Doctrine
Espionage

Gathering, transmitting, or receiving national defense information for a foreign power or entity with intent to harm the United States or advantage a foreign government.

Related: Insider Threat, Counterintelligence
Insider Threat

A person with authorized access who exploits that trust to cause harm through espionage, unauthorized disclosure, sabotage, or violence, often evading technical perimeter defenses.

Related: Espionage, Continuous Evaluation
Counterintelligence

Activities identifying, deceiving, exploiting, and neutralizing foreign intelligence services and other threats, protecting personnel, information, and operations from espionage and subversion.

Related: Espionage, Insider Threat
Continuous Evaluation

Ongoing automated review of security-relevant records, such as criminal and financial data, for cleared personnel between formal reinvestigations, replacing strictly periodic review cycles.

Related: Insider Threat, Security Clearance Adjudication
Security Clearance Adjudication

The process of weighing investigative findings against national security criteria to decide whether a person is eligible for access to classified information.

Related: Continuous Evaluation
Unauthorized Disclosure

Releasing classified or controlled unclassified information to a person without the clearance, need-to-know, or legal authority to receive it, whether intentional or negligent.

Related: Espionage, Insider Threat
Network Intrusion

Unauthorized access to a computer system or network, whether by exploiting vulnerabilities, stolen credentials, or malicious software, often the first stage of data theft or disruption.

Related: Malware Analysis, Digital Artifact
Digital Artifact

Any trace left by user or system activity in digital media, such as log entries, file metadata, registry keys, or timestamps, used to reconstruct events.

Related: Network Intrusion, Forensic Imaging
Malware Analysis

Examination of malicious software to determine its behavior, capabilities, indicators, and origin, conducted statically on code or dynamically in isolated environments.

Related: Network Intrusion, Digital Artifact
Preservation Letter

A formal request to a service provider or custodian to retain records that may be relevant to an investigation, preventing routine deletion before legal process is served.

Related: Digital Artifact
Procurement Fraud

Deception in government contracting, including bid rigging, defective pricing, product substitution, and false claims, that corrupts competition or inflates costs to the government.

Related: Bid Rigging, Kickback
Bid Rigging

Coordinated conduct among supposed competitors that predetermines a contract award, through complementary bids, bid suppression, rotation, or market allocation, harming fair competition.

Related: Procurement Fraud, Collusion
Kickback

A secret payment or thing of value given to influence a government contracting decision or in exchange for favorable treatment, prohibited under anti-kickback statutes.

Related: Procurement Fraud, Conflict of Interest
Conflict of Interest

A circumstance where a person's private interests or relationships could improperly influence official duties, requiring disclosure, recusal, or divestiture to preserve impartiality.

Related: Kickback, Ethical Wall
Collusion

A secret agreement among parties to deceive or gain an improper advantage, such as competitors coordinating prices or bids instead of competing independently.

Related: Bid Rigging
Voluntariness

The requirement that a statement be the product of free choice, not coercion, threats, promises, or exhaustion, or it will be excluded regardless of its truth.

Related: Miranda Warning, Custodial Interrogation
Source Debriefing

Systematic questioning of a human source to extract, record, and evaluate information, covering observations, reliability, access, and any compensation or tasking arrangements.

Related: Source Reliability
Source Reliability

An assessment of a human source's credibility and access, weighing past accuracy, motive, consistency, and corroboration to determine how much weight information deserves.

Related: Source Debriefing
Report of Investigation

The official narrative record of an investigation, presenting facts, chronology, evidence, and actions in objective, third-person, agency-standard format for review and referral.

Related: Investigative Chronology
Investigative Chronology

A dated, sequential account of case events and actions that supports the narrative report, reveals gaps, and helps reviewers and prosecutors follow the investigation's progression.

Related: Report of Investigation
Best Evidence Rule

The principle that the original writing, recording, or photograph is required to prove its contents, subject to exceptions for lost, unavailable, or duplicate originals.

Related: Chain of Custody
Unified Command

A command arrangement in which one commander exercises authority over assigned forces from multiple services, common in joint operations and contingency environments.

Related: Combatant Command
Combatant Command

A geographic or functional joint military command with broad, continuing authority over assigned forces, exercised through a single commander under the Secretary of Defense.

Related: Unified Command
Inspector General

An office that conducts independent oversight of programs and personnel, investigating misconduct, waste, and fraud and reporting findings to senior leadership and Congress.

Related: Whistleblower Reprisal
Whistleblower Reprisal

Retaliation against a person for lawfully reporting waste, fraud, abuse, or wrongdoing, prohibited by statute and subject to investigation by oversight authorities.

Related: Inspector General
Ethical Wall

A procedural barrier preventing personnel with conflicting duties or information from participating in a matter, protecting impartiality and preventing misuse of sensitive knowledge.

Related: Conflict of Interest
Gift Acceptance

Receiving a gratuity from a prohibited source or in connection with official duties, restricted by ethics rules to prevent undue influence and maintain public trust.

Related: Conflict of Interest