Our Courses

First insight into the latest version of the Windows Operating System.  This course takes a deep dive into the latest features relevant to any DFIR examination where Windows 11 host user data.

Advanced Level

The course covers in-depth architecture and functionality of the Windows NT File System (NTFS), the FAT and the ExFAT File Systems and related directory entry information for locating files on electronic devices.

Intermediate Level

This advanced level course will equip you with the practical skills and competencies required to identify and extract various sources of data recoverable from Unmanned Aircraft Systems (UAS), including their associated control devices in line with approved best practices.

Advanced Level

Learn to use various applications and utilities to successfully identify, process, understand and exploit numerous database structures found on iOS, Android, Windows and Apple systems.

Advanced Level

This hands-on, three-day course will introduce the participants to the many forensically relevant items saved on a Windows-based system through the user’s interaction and routine, host operating system functionality.

Intermediate Level

The Advanced Windows^® 10 Forensic analysis class is an expert-level four-day training course, designed for examiners who are familiar with the principles of digital forensics and keen to expand their knowledge on advanced forensics using a host of third-party tools to improve their computer investigations. 

Advanced Level

This 4-Day intermediate class is designed to provide the student with the skills and techniques to response to a cyber intrusion incident. The students will learn the anatomy of an intrusion, collection of memory and volatile artifacts, and techniques to unravel the mystery of how the network was compromised.

Intermediate Level

This is a 5-day course is designed for the investigator/examiner entering the field of digital forensics that provides the fundamental knowledge to investigate incidents involving electronic devices. The course covers in depth architecture and functionality of data structures and an introduction into Windows Operating System Analysis

Foundations Level

This is an advanced level course presented from an investigators point of view. The content will provide the student with the understanding of how to accomplish an effective investigation of Darknet sites and its users. 

Advanced Level

For investigators to advance their knowledge of bitcoin, blockchain, cryptocurrency, its criminal applications, and forensic techniques.

Intermediate Level

This Cryptocurrency Foundation Course for Investigators is a hands-on practical 5-day training program designed for investigators who want to advance their knowledge of bitcoin, the blockchain, cryptocurrency, and its criminal applications.

Foundation Level

This Advanced Cryptocurrency Investigator Course is a hands-on practical 5-day multi-instructor-led interactive program designed for law enforcement officials, intelligence analysts, and investigators who want to significantly advance their cryptocurrency investigation and seizure skills.

Advanced Level

Our Cyber Security Track offers a wide range of classes to prepare you for the challenges of securing and investigating a digital infrastructure.

Intermediate Level

Advanced courses that utilize programming languages to expose information that can only be found by digging into the Linux and Windows Kernel.

Advanced Level

This course will first introduce you to the RegEx language and apply the skills learnt across multiple data sets using Windows® PowerShell. This is a hands-on intensive course with multiple instructor led labs and student practicals, followed by a certification exam to demonstrate proficiently in building complex RegEx patterns and applications in PowerShell.

Specialist Level

This one-day intermediate level workshop will equip you with the practical skills and competencies required to identify and perform analysis of data from various sources of storage media recovered from Unmanned Aircraft Systems (UAS), also known as Drones, including their associated control devices in line with approved best practices.

Specialist Level

This course will give participants an understanding of SQLite, how data is stored and the skills necessary to create queries to extract, interpret and present information in a meaningful manner. This includes translating dates and times and querying information stored in multiple tables to create a more robust report.

Specialist Level