Professional Training in Digital Forensics, Cyber Investigations & Investigative Tradecraft.
Expert-led, hands-on courses that build real capability — from digital forensics and mobile and online investigations to cryptocurrency tracing and investigative leadership. Every course is practical, scenario-based, and can be tailored and delivered at your facility.
The grounding every digital investigator needs, plus the first-responder skills that protect evidence in the critical first minutes.
The essential foundation for anyone who handles digital evidence. Participants build the sound, court-defensible habits — lawful authority, identification, seizure, chain of custody, hashing, and write-blocking — that every advanced discipline relies on.
Hardware literacy that prevents costly mistakes in the field. Participants learn to recognize storage technologies, understand how and where data is stored, and connect media correctly through a write-blocker.
A force multiplier for general field investigators. Trains first responders to recognize, lawfully collect, isolate, and document digital evidence so examiners receive sound, admissible material.
Hands-on imaging, rapid response, and deep examination across the most common evidence types.
Hands-on forensic imaging done right. Participants acquire verified images from a range of media using hardware and software tools, proving integrity at every step.
Sound acquisition under time pressure. Covers on-scene triage, volatile and live capture, and the encryption-aware power-state decisions that can make or break a case.
From image to insight. Participants examine acquired evidence with leading analysis platforms — recovering files, analyzing user activity, building timelines, and producing defensible reports.
Deep Windows artifact analysis. Reconstruct user and system activity from the registry, event logs, and file-system artifacts to answer the questions a case turns on.
What the disk cannot tell you. Acquire and analyze volatile memory to surface running processes, network connections, injected code, and malware indicators.
Make video evidence count. Recover, authenticate, and present footage from DVR/CCTV, body and dash cameras, and cloud sources using defensible, reproducible methods.
Investigate the drone. Recover and analyze data from unmanned aircraft systems (UAS) and their controllers — flight logs, telemetry, media, and operator identity — to reconstruct missions and attribute activity. A 5-day intensive.
Phones are the case. Lawful, sound recovery from the highest-volume evidence source — from fundamentals to advanced extractions.
Lawfully seize, acquire, and analyze mobile devices to recover communications, location, and application data in a sound, defensible manner.
The hard extractions. Full file-system and physical methods, locked and encrypted devices, manual SQLite and application decoding, and cloud acquisition.
Find it, verify it, preserve it — across the open web, social media, and the dark web, safely and lawfully.
Plan and run lawful, secure open-source investigations with sound attribution management and court-ready evidence capture.
Turn social media into evidence. Identify and attribute accounts, analyze activity and networks, and lawfully collect and preserve social-media evidence.
Operate safely in anonymized spaces. Access and investigate dark-web sources, recognize illicit-marketplace indicators, and develop attribution leads while protecting the investigator.
From first principles to on-chain tracing and the scams hitting communities now.
Demystify cryptocurrency for investigators. Understand blockchains, wallets, and transactions well enough to recognize, preserve, and act on crypto evidence.
Follow the money on-chain. Trace transactions across wallets and services using industry tracing tools, cluster addresses, and convert leads into lawful action.
Respond to the scams hitting your community. Recognize crypto fraud typologies and red flags, capture evidence quickly, and support victims.
Stay ahead of artificial intelligence and cyber-enabled threats.
A balanced, practical look at AI-enabled threats (deepfakes and synthetic media), the responsible investigative use of AI, and the governance and bias issues leaders must manage.
How threat actors use technology — online radicalization and recruitment, digital financing, operational use of technology, and how investigators detect and disrupt it.
Equip examiners, investigators, and the courtroom to handle digital evidence — from eDiscovery to the witness stand.
A practical introduction to electronic discovery, from legal hold to production. Participants learn how electronically stored information (ESI) is identified, preserved, collected, processed, reviewed, and produced defensibly — and how investigators, IT, and counsel work together. A 1-day workshop.
Become a credible, effective expert witness. Participants learn to write defensible reports, qualify as an expert, present technical findings clearly, and hold up under cross-examination — with courtroom simulation and feedback. A 2-day course.
Digital evidence for the bench. A peer workshop helping judges evaluate admissibility, authentication, reliability, and chain of custody for digital evidence, with practical ruling scenarios.
Win the digital case. Equips prosecutors to frame charges, work with examiners, lay foundation, qualify experts, and present digital exhibits effectively.
The investigator and leader skills that move a case from information to conviction — and build a capable, accountable organization.
From raw information to actionable leads. Build, evaluate, and analyze information from human, open, and record sources, including link analysis and lead development.
Never lose a lead. Disciplined registration, case-file construction, secure storage, retrieval, deconfliction, and lawful sharing of investigative information.
Run the major-incident investigation. Secure and document the scene, manage evidence, and drive the investigation from response to case-building with a structured methodology.
Lawful, effective, evidence-based interviewing. A rapport-based, rights-compliant program built on the proven PEACE model, with recorded role-play practice.
Understand and disrupt the network. Analyze terrorist organizations — structure, financing, and networks — and apply rights-based investigative and disruption strategies.
Lead the complex investigation. Command structure, strategy and decision logging, tasking, information flow, resources, and inter-agency and prosecutorial coordination.
Strategy for senior leaders. A seminar on building counterterrorism capability, prevention and community partnerships, rights-based accountability, and crisis leadership.
All 31 courses with per-person pricing, durations, key topics, and audience. Enter your email and the PDF is yours.
No spam. Occasional training updates only; unsubscribe anytime.