Abstract Proposal: Law enforcement investigations increasingly rely on digital and open-source evidence, yet many cases fail when OSINT, cyber evidence, and legal process remain disconnected. This session provides a practical framework for integrating digital evidence, investigative tradecraft, and legal considerations into a defensible workflow. Using real investigative scenarios, attendees will learn how to align platform records, OSINT, and digital artifacts to strengthen attribution, corroborate timelines, and support prosecutorial outcomes.