The Digital Forensics Investigator course familiarises participants with open-source digital forensics tools, multiple file systems structures, data carving, evidential digital artefacts, forensic strategies, and data analysis techniques — all through hands-on exercises grounded in a realistic criminal investigation scenario.
The 2025 update includes new practical exercises, with traces developed in the Scenario dataset project, and allows the course to be divided into two Modules, a request done by end-users to enable a smoother integration of training and operational duties.
Module 1 is an online e-learning set of activities with theoretical content (approx. 40 h). It can also be deployed standalone and used as a baseline instruction for Senior Managers in charge of Digital Forensics or Cybercrime units. Module 2 is an on-site classroom course with practical exercises focusing on using the Linux command line interface.
After completing the training activity, the participants shall be able to explain and apply the rules of forensics and reporting, use a forensic distribution of the Linux operating system for basic tasks, acquire and access forensically digital evidence, recover deleted files, and apply basic file carving tasks, among other things.