Digital and Mobile Device Forensics and Investigations

Course overview

Almost every investigation today, from fraud and corruption to violent crime, involves evidence on computers and mobile phones. Investigators who cannot acquire and examine that evidence properly risk losing it or seeing it excluded in court. This digital forensics course gives investigators and technical staff the hands-on skills to handle digital evidence from seizure to testimony.

The first week covers foundations and computer forensics: principles of digital evidence, legal requirements, scene handling and seizure, forensic imaging, file systems, recovering deleted data, and examining Windows and Linux artefacts such as user activity, browser history and email. The second week focuses on mobile devices: Android and iOS acquisition methods, feature phones, messaging and mobile money application data, location evidence, cloud and backup data, followed by timeline analysis, reporting and presenting findings in court. Participants work on laptops with forensic tools and practice evidence sets throughout.

Participants leave able to acquire, examine and report computer and mobile evidence in a way that stands up in court.

What you will be able to do

• Apply principles of digital evidence and chain of custody
• Seize and preserve computers and mobile devices correctly
• Create and verify forensic images
• Examine file systems and recover deleted data
• Analyse operating system, browser and email artefacts
• Acquire and analyse data from Android and iOS devices
• Build timelines from digital evidence
• Report findings and give evidence in court

Who should attend

For investigators, digital forensics examiners and ICT security staff who handle digital evidence. Participants must bring a laptop; basic computer literacy is required.

• Police and agency investigators
• Digital forensics examiners
• Cybercrime unit officers
• Fraud investigators
• ICT security officers
• Anti-corruption investigators
• Internal audit IT specialists

Course outline

Week 1

Week 2

Fees are per participant in US dollars and cover tuition, course materials and your certificate. Travel and accommodation are not included.