Our Courses

We take Digital Forensic Training to the next level, moving away from “push button forensics” and exposing digital evidence wherever it exists. Ones and zeroes are neutral… so is our training.

Course CalendarCourse Delivery Options

Digital Forensic Courses

Windows 11 Forensic Exploitation

First insight into the latest version of the Windows Operating System.  This course takes a deep dive into the latest features relevant to any DFIR examination where Windows 11 host user data.

Advanced Level

Data Storage Foundations

The course covers in-depth architecture and functionality of the Windows NT File System (NTFS), the FAT and the ExFAT File Systems and related directory entry information for locating files on electronic devices.

Intermediate Level

UAV (Drone) Forensic Analysis

This advanced level course will equip you with the practical skills and competencies required to identify and extract various sources of data recoverable from Unmanned Aircraft Systems (UAS), including their associated control devices in line with approved best practices.

Advanced Level

Applied Database Forensics

Learn to use various applications and utilities to successfully identify, process, understand and exploit numerous database structures found on iOS, Android, Windows and Apple systems.

Advanced Level

Windows Artifact Foundations

This hands-on, three-day course will introduce the participants to the many forensically relevant items saved on a Windows-based system through the user’s interaction and routine, host operating system functionality.

Intermediate Level

Windows 10 Advanced Forensics

The Advanced Windows® 10 Forensic analysis class is an expert-level four-day training course, designed for examiners who are familiar with the principles of digital forensics and keen to expand their knowledge on advanced forensics using a host of third-party tools to improve their computer investigations. 

Advanced Level

KNIFE - Known Network Intrusion Forensic Examinations

This 4-Day intermediate class is designed to provide the student with the skills and techniques to response to a cyber intrusion incident. The students will learn the anatomy of an intrusion, collection of memory and volatile artifacts, and techniques to unravel the mystery of how the network was compromised.

Intermediate Level

Foundations in Digital Forensics

This is a 5-day course is designed for the investigator/examiner entering the field of digital forensics that provides the fundamental knowledge to investigate incidents involving electronic devices. The course covers in depth architecture and functionality of data structures and an introduction into Windows Operating System Analysis

Foundations Level

Digital Investigation Courses

DarkWeb Investigator

This course will provide the student with the understanding of how to accomplish effective investigation of Darknet sites and users. The course will allow Law enforcement to step up their investigative skills to meet the new challenges offered by the anonymity of the Darknet.


Advanced Level

Open-Source Intelligence (OSINT)

This Foundations course will introduce to the world of Open-Source Intelligence (OSINT) information research, collection, exploitation, and analysis. This course will teach you how apply good attribution to protect your identity and organization by providing defensive techniques in the operating environment, including misattribution and creation and usage of sock puppets. 


Foundation Level

Cryptocurrency Investigations

This course is designed for Investigators involved in the investigation of any crime where the use of cryptocurrency is involved.  This course will cover the basics of cryptocurrency, how its used and how to trace transactions through blockchains


Intermediate Level

Specialized Courses

Cyber Security Tracks

Our Cyber Security Track offers a wide range of classes to prepare you for the challenges of securing and investigating a digital infrastructure.

Intermediate Level

Kernel Programming & Exploitation

Advanced courses that utilize programming languages to expose information that can only be found by digging into the Linux and Windows Kernel.

Advanced Level

Applied RegEx using PowerShell

This course will first introduce you to the RegEx language and apply the skills learnt across multiple data sets using Windows® PowerShell. This is a hands-on intensive course with multiple instructor led labs and student practicals, followed by a certification exam to demonstrate proficiently in building complex RegEx patterns and applications in PowerShell.

Specialist Level

UAV (Drone) Forensics Certification Workshop

This one-day intermediate level workshop will equip you with the practical skills and competencies required to identify and perform analysis of data from various sources of storage media recovered from Unmanned Aircraft Systems (UAS), also known as Drones, including their associated control devices in line with approved best practices.

Specialist Level

SQLite Forensics Fundamentals

This course will give participants an understanding of SQLite, how data is stored and the skills necessary to create queries to extract, interpret and present information in a meaningful manner. This includes translating dates and times and querying information stored in multiple tables to create a more robust report.

Specialist Level