BLD Blue Lights Digital

FORUM
Welcome to the Digital Forensics Apprentice Forum, a dedicated space where you can connect with fellow apprentices, seasoned professionals, and industry experts. Here, you can dive into riveting discussions, share insights, ask questions, and stay updated on the latest trends, tools, and techniques in the field of digital forensics.

Our community thrives on collaboration and the exchange of ideas. Every voice matters in our collective pursuit of excellence in the fascinating world of digital forensics.

LEVEL 4 APPRENTICESHIP
Our 18-month Intelligence Analyst Apprenticeship combines theoretical knowledge with practical, scenario-based exercises suitable for a range of public and private sector organisations.
Contact registrar@bluelightsdigital.com for any queries or more information.

ONLINE SELF-STUDY
This course on ODYSSEY LIVE is structured to give you, the examiner, a fundamental working knowledge of ODYSSEY LIVE.  This will enable you to use ODYSSEY LIVE to gather evidence and intelligence and to provide a positive outcome regarding the examination of devices.

INSTRUCTOR-LED TRAINING (10 days)
A comprehensive course covering the skills that a Digital Forensics technician or practitioner will require in order to competently carry out forensic examinations of computers and mobile devices. The course consists of initial self-study learning using our online Learning Management System.

SELF-STUDY LEARNING OUTCOMES

• Understand the role of a Digital Forensics Technician and how they fit in with the larger investigation team.
• Understand the legislation, guidance and procedures that will be relevant to the role.
• Learn about the importance of planning and documenting examinations, ensuring data integrity and achieving the best evidence during examinations.
• Understand the fundamental principles of Digital Forensics, their own limitations and where to seek further support.
• Become familiar with the key equipment and types of software that are employed in a Digital Forensics environment.
• Gain the skills required to respond to a Digital Forensics incident by understanding the importance of careful handling of exhibits and how to gather evidence from a scene.
• Identify different file types and file systems.

The course then progresses to ten days of in-person training, which is largely practical based.

LEARNING OUTCOMES FROM IN-PERSON TRAINING

• Extract and investigate evidence from computers running Microsoft Windows and Apple operating systems.
• Extract and investigate evidence from mobile devices.
• Understand how to gather and investigate evidence from Internet and cloud-based sources.
• Understand encryption, the different types that can be encountered and how this can influence an investigation.
• Learn about Structured Query Language (SQL) based databases and how to interrogate them during an investigation.
• Understand how to investigate various evidence artefacts including emails, internet browsing history, multimedia and documents that have been extracted during the course of investigations.
• Learn how to investigate data associated with social media and the Internet of Things (IoT).

INSTRUCTOR-LED TRAINING (1 day)
For any investigators who handle and/or process digital forensic products as part of the investigative process.

LEARNING OUTCOMES

• Gain an appreciation of the processes for extracting data from devices.
• Classify and choose what forensic output files are created.
• Distinguish in which format an output file can be generated.
• Appraise and effectively target certain elements within the generated products.
• Construct reasoned intelligence or evidential conclusions.

INSTRUCTOR-LED TRAINING (3 days)
This 3-day training is for anyone wishing to learn Mobile Core Skills.
There are no prerequisites for this training.

LEARNING OUTCOMES

• Identify different mobile phone handsets.
• Explain SIM cards and their features.
• Understand mobile network operators and services.
• Demonstrate exhibit handling and seizure.
• Demonstrate principles of examination.

ONLINE SELF-STUDY
In this interactive course, you'll learn about the methods offenders use to access prohibited material, techniques they employ to hide their activities, and approaches you can use to identify these behaviours during a home visit.

The course consists of several modules, each building on the last, to deepen your understanding and skills.

We'll begin by identifying ways to prepare yourself for a visit, ensuring you're fully equipped to engage with the subject and assess their electronic lifestyle to detect any signs of offending.

Next, we'll explore the methods people may use to access or share prohibited material, as well as ways they might communicate with others in potentially harmful ways.

Lastly, we'll cover techniques for examining electronic devices, enabling you to detect whether someone has used certain methods to access prohibited material or communicate in ways that could violate a Sexual Harm Prevention Order.

GLOSSARY
Law enforcement agencies often employ a unique set of titles, abbreviations, and phrases that can be perplexing to the uninitiated. Whether you're a curious citizen, a prospective police officer, or simply someone interested in understanding the intricacies of law enforcement in the UK, this glossary is your key to deciphering the world of policing and the UK Criminal Justice System. Here, we aim to demystify the terminology, shed light on the hierarchical structure of police ranks, and provide clarity on the various acronyms used in the field. 

Cyber crime is an ever growing threat to individuals. Discover more about the different types of cyber crime and how to investigate them.

This course provides an overview of handling digital evidence at a crime scene. Learners will explore common devices found at the scene, including mobile phones and other digital media, best practices for seizing digital evidence. It also covers alternative information sources such as routers and Wi-Fi access points.

As the world around us becomes smarter and increasing digital, you might be surprised to learn how many devices can be used for investigative purposes.

Every modern vehicle is now a source of digital data, whether it's tracking location, monitoring performance or faults, logging calls or storing journey details. Discover how you can harness vehicles as a tool for investigation in this course.

INSTRUCTOR-LED TRAINING (2 days - CPD Accredited)
For investigators who seek to acquire, cleanse, and interpret cell site and internet communications data.  In a physical and digital combined world, there is still a significant importance played by communications data. 

When presented alongside other evidence, communications data is a powerful element of a case which can support or undermine other physical evidence.  Data available from providers constantly evolves and may change or adapt with technological developments. Investigators need to be educated to identify the opportunities and risks posed by traditional and emerging data sets.

This training is CPD Accredited

Accredited CPD training means the learning activity has reached the required Continuing Professional Development standards and benchmarks. The learning value has been scrutinised to ensure integrity and quality. The CPD Certification Service provides recognised independent CPD accreditation compatible with global CPD requirements.

LEARNING OUTCOMES

• Understand the application process and legislative considerations needed for focused, objective-led communications data acquisition
• Maximise your effectiveness in the acquisition and analysis of communications data
• Recognise key identifiers in communications data records and location-based information
• Focus and analyse through the use of Excel functions and create supporting products
• Evaluate information and draw inferences by maximising opportunities provided by digital identifiers and devices
• Effectively present data to an evidential standard suitable for court

ONLINE SELF-STUDY (City & Guilds Assured)
Our City & Guilds Assured Cryptocurrency Investigation training is designed for anyone with a need to understand and investigate the ownership and use of cryptocurrencies, such as Bitcoin.

This training was designed by an experienced cybercrime investigator with decades of experience as a police detective.  Delegates need no prior knowledge of cryptocurrency as the training builds knowledge from the ground up with no expectation of a technical background.

The training covers a number of essential topics, including cryptocurrency wallets, on-ramps and off-ramps, search and seizure guidance, and mining. 

This training is City & Guilds Assured

This learning activity has been recognised and assured by City & Guilds, global leaders in learning excellence and quality.  The Assured Benchmark is the training quality standard that City & Guilds has developed with industry experts and is made up of their five core components (and optional where applicable). They also recognise both face-to-face and digital learning, assessed or non-assessed training – and training in local languages.

INSTRUCTOR-LED TRAINING (2 days)
The Digital Search & Seizure training is aimed at staff in a variety of roles including front line, supervisors, forensic scene investigators, POLSA officers, as well as specialist teams. The theme of the training is to take a fresh look at the scene of a search, with a view to identifying the key digital opportunities that exist but may have been overlooked.

LEARNING OUTCOMES

• Identify/secure an electronic crime scene
• Learn how to deal with witnesses and suspects at scenes
• Identify priorities within a scene
• Understand the risk factors in relation to the loss of evidence
• Evaluate on-site opportunities
• Provide strategic advice to SIOs and colleagues
• Provide some guidance around business crime
• Experience the current development of our virtual reality crime scene

INSTRUCTOR-LED TRAINING (1 day)
For supervisors in all roles and fields, this workshop for up to fifty delegates underlines the need for digital investigation awareness across all disciplines of policing.

LEARNING OUTCOMES

• Gain a high-level understanding of the broad range of digital investigation methods available
• Be able to apply methods and strategies to all elements of day-to-day policing
• Identify who in the organisation can provide specialist support in such areas

INSTRUCTOR-LED TRAINING (5 days - City & Guilds Assured)
LAW ENFORCEMENT PROFESSIONALS ONLY
The Digital Tactical Advisor (DTAC) Strategy (5-day) training is tailored for individuals who have already completed the DMI or DTAC Investigator training courses or possess extensive prior expertise in digital investigations. The focus is on honing your strategy writing within the realm of serious crime investigations.

During this intensive course, you will learn how to create comprehensive strategy logs for Senior Investigating Officers. You will cover the considerations that need to be taken into account at various stages of an investigation, enabling you to provide strategic guidance with absolute precision.

You will work through a practical scenario and at each stage learn how to expertly document and present your advice and digital evidence in a format that is not only coherent but easily digestible for all stakeholders involved. The ability to convey complex information with utmost clarity is an indispensable skill that you will master during our programme.

The course will also build upon previous learning of digital investigations by delving into more advanced telecommunications and Digital Forensics techniques.

This learning activity has been recognised as Assured by City & Guilds, global leaders in skills development. Assured is a global quality benchmark that recognises excellence in training and learning. Developed by leading brands in skills development, the Assured benchmark demonstrates how organisations plan, design and deliver their learning programmes to meet world-class quality standards.

 13 - 17 October 2025
BOOK NOW15 - 19 September 2025
FULLY BOOKED 

LEARNING OUTCOMES

INSTRUCTOR-LED TRAINING (1, 3, or 5 days as required)
LAW ENFORCEMENT PROFESSIONALS ONLY
In today’s digital landscape, the key to successfully locating missing persons lies in leveraging the vast array of digital intelligence available. Our expert-led training equips UK law enforcement investigators with the skills to harness communications data, open-source intelligence (OSINT), and digital forensics in real-world missing person cases.

This course is designed to enhance investigative capabilities, providing practical techniques and real-case applications to improve outcomes in time-critical situations.

Who is this for?

This training is ideal for:
✅ Investigators working within dedicated Missing Person teams, Public Protection and CID.
✅ Officers new to digital investigations who require a strong foundation.
✅ Experienced investigators looking to refine their skills in digital intelligence.
✅ Supervisors overseeing Locate teams who require strategic input on digital methodologies.

LEARNING OUTCOMES

1-Day Essentials Course

A concise introduction to digital investigation techniques for time-sensitive missing person cases.

• Understand the fundamentals of communications data, OSINT, and digital forensics.
• Recognise key digital footprints that can assist in locating individuals.
• Identify quick-win techniques to leverage open-source and device data effectively.

3-Day Investigator Course

A deeper dive into digital investigation strategies, practical application, and case-based scenarios.

• Develop structured methodologies for analysing digital footprints.
• Interpret communications data to determine movement patterns and last-known locations.
• Apply OSINT techniques to uncover key intelligence on persons of interest.
• Use mobile forensics to extract and analyse relevant digital evidence.
• Work collaboratively with partner agencies and digital specialists.

5-Day Advanced Investigator Course

An intensive, hands-on training experience for law enforcement professionals seeking expert-level digital investigative skills.

• Conduct in-depth analysis of telecoms data, including cell site and geolocation intelligence.
• Master advanced OSINT techniques, including social media exploitation and dark web analysis.
• Apply digital forensics methodologies to recover evidence from mobile devices, cloud storage, and computers.
• Understand how digital evidence can be used in legal proceedings and case building.
• Explore real-world case studies and undertake live scenario-based investigations.

Supervisor Input – Strategic Digital Investigation for Missing Persons

A dedicated input for supervisors managing Locate teams, ensuring effective oversight of digital investigative strategies.

• Understand the role of digital intelligence in missing person operations.
• Enhance decision-making through intelligence-led tasking.
• Develop best practices for directing investigators in digital data acquisition.
• Improve coordination with external agencies and digital specialists.
• Identify common pitfalls and challenges in digital investigations.

INSTRUCTOR-LED TRAINING (1 day - CPD Accredited)
LAW ENFORCEMENT PROFESSIONALS ONLY
Our MOSOVO Awareness training is aimed at Law Enforcement and is only for those who monitor and investigate members of society who are perceived to present a serious and credible threat to the general public.

This 1-day training provides an awareness of the skills and required digital knowledge when managing violent and sexual offenders.

This training develops existing skills focused on specific types of offenders.

 
This training is CPD Accredited

Accredited CPD training means the learning activity has reached the required Continuing Professional Development standards and benchmarks. The learning value has been scrutinised to ensure integrity and quality. The CPD Certification Service provides recognised independent CPD accreditation compatible with global CPD requirements.

LEARNING OUTCOMES

• Understand the ways in which a subject may hide their digital activities from their police management officer.
• Understand what can be achieved by examining a home router.
• Understand what can be achieved by using a Wi-Fi ‘sniffing’ program (non-intercept).
• Recognise popular apps designed to hide online activity.
• Recognise current trends in the distribution of IIOC.
• Gain an awareness of the risks to management officers visiting subject premises.
• Understand the three easy ways to spot an SHPO breach: recently used sites, deleted applications, and missing USB devices.

INSTRUCTOR-LED TRAINING (5 days - CPD Accredited)
LAW ENFORCEMENT PROFESSIONALS ONLY
Our MOSOVO training is aimed at Law Enforcement and is only for those who monitor and investigate members of society who are perceived to present a serious and credible threat to the general public.

This 5-day training provides a range of necessary skills and specialist knowledge in the digital environment to identify the relevant opportunities, whilst also weighing up the risks and safeguarding issues.

This training develops existing skills focused on specific types of offenders. 

 
This training is CPD Accredited

Accredited CPD training means the learning activity has reached the required Continuing Professional Development standards and benchmarks. The learning value has been scrutinised to ensure integrity and quality. The CPD Certification Service provides recognised independent CPD accreditation compatible with global CPD requirements.

LEARNING OUTCOMES

• Understand the ways in which a subject may hide their digital activities from their police management officer.
• Understand what can be achieved by examining a home router.
• Understand what can be achieved by using a Wi-Fi ‘sniffing’ program (non-intercept).
• Recognise popular apps designed to hide online activity.
• Recognise current trends in the distribution of IIOC.
• Gain an awareness of the risks to management officers visiting subject premises.
• Understand the three easy ways to spot an SHPO breach: recently used sites, deleted applications, and missing USB devices.
• Learn a full home Wi-Fi router examination to identify undeclared devices.
• Acquire further intel from routers, concerning filesharing applications.
• Use the command line on Windows machines to identify potential SHPO breaches.
• Use triage tools to identify a breach (pre-device seizure only).
• Learn the Internet of Things device recognition.
• Use app-based Open Source Intelligence (OSINT) to identify social media profiles and potential victims.
• Become familiar with the dark web.
• Assess the subject’s use of social media platforms using OSINT tools and techniques.
• Understand the legislation concerning the use of such techniques.
• Recognise how to use covert OSINT techniques safely, including tradecraft for the creation and maintenance of a false persona.
• Understand the investigative opportunities linking a subject’s internet use with IP and communications data.

INSTRUCTOR-LED TRAINING (4 days - City & Guilds Assured)
This Open Source Intelligence (OSINT) 4–day training is aimed at investigators in all roles who have a need to search for, identify, acquire, and evidence data that exists on the public internet.

This training is City & Guilds Assured

This learning activity has been recognised and assured by City & Guilds, global leaders in learning excellence and quality.  The Assured Benchmark is the training quality standard that City & Guilds has developed with industry experts and is made up of five core components (and optional where applicable). They also recognise both face-to-face and digital learning, assessed or non-assessed training – and training in local languages.

 20 - 24 October 2025
BOOK NOW

LEARNING OUTCOMES

• Explain the structure of the Internet, and be able to investigate domains and services
• Acquire data in an evidentially robust manner
• Identify evidence and intelligence across a variety of social networks
• Identify other sources of publicly available data about individuals and other entities
• Use mobile apps to add additional depth to research
• Investigate evidence from the dark web and trace cryptocurrency transactions
• Use freely available tools to investigate the integrity and origin of digital images
• Identify ways in which poor configuration of services can be exploited to acquire hidden data

INSTRUCTOR-LED TRAINING (1 day)
The Professional Investigation Skills training is for those working in any investigative role, whether the ultimate outcome of an investigation is a criminal trial, a civil court hearing, a tribunal, inquest, or any other internal or external process.  

Experienced former police detectives teach delegates the most effective and evidentially-sound ways to interview witnesses and suspects, take written statements, seize and handle exhibits, prepare case files and documentation, devise and document investigation plans that will stand scrutiny, and present any such evidence to the highest standard required in any court or hearing.

LEARNING OUTCOMES

• Be able to identify opportunities arising from an investigation
• Handle and seize exhibits in a robust fashion and maintain their integrity
• Show competence in taking written statements from witnesses
• Demonstrate an understanding of the processes around interviewing witnesses and suspects
• Demonstrate effectiveness with the use of questioning formats
• Understand obligations for case and file preparation
• Understand the principles of disclosure and audit records

INSTRUCTOR-LED TRAINING (1 day - City & Guilds Assured)
The Wi-Fi Router Investigation programme is suitable for staff who may attend crime scenes to identify evidence of activity, including crime scene investigators, Digital Media Investigators (DMIs), sex offender managers, and dedicated search team staff.

This training is City & Guilds Assured

This learning activity has been recognised and assured by City & Guilds, global leaders in learning excellence and quality.  The Assured benchmark is the training quality standard that City & Guilds has developed with industry experts and is made up of their five core components (and optional where applicable). They also recognise both face-to-face and digital learning, assessed or non-assessed training – and training in local languages.

LEARNING OUTCOMES

• Demonstrate the relevance of router investigations in Policing

• Discuss some of the common myths about router investigation

• Describe the basic formats of IP addressing

• Identify various types of Hardware

• Recognise different forms of Router security

• Recognise the different wi-fi identifiers

• Locate and interpret DHCP tables

• Identify currently connected devices

• Interpret historic log files

• Discuss the significance of wi-fi surveys and other investigative opportunities

INSTRUCTOR-LED TRAINING (1 day)
In the modern investigative landscape, managing and disclosing communications data is a critical responsibility.

This training equips professionals with the knowledge and skills to navigate the legal framework, understand key definitions and roles, and ensure compliance with the Criminal Procedure and Investigations Act.

From reviewing large datasets and digital forensic results to preparing disclosure materials for prosecutors, this course provides practical insights into recording, retaining, and redacting sensitive information. 

LEARNING OUTCOMES

• Identify what disclosure is and why we need to comply with obligations under the Criminal Procedure and Investigations Act.
• Identify key definitions and roles involved in the disclosure process.
• Distinguish the responsibilities of the different people involved in the disclosure process.
• Discuss the disclosure test to understand when evidence needs to be disclosed.
• Discuss the need to record, retain and reveal information throughout an investigation.
• Analyse methods of reviewing large sets of data such as call data records and the results of digital forensics examinations and the impact on disclosure.
• Create disclosure material for prosecutors including Disclosure Management Documents and schedules of unused and sensitive material.
• Examine methods to redact sensitive information from schedules

INSTRUCTOR-LED TRAINING (5 days - ILM Recognised)
Level 6 Certificate in Leadership
This is Level 6 Certificate in Leadership – ILM leadership and management programme in the Federation for the Management of Projects (FMP).

It covers the skills, knowledge, competencies, and proficiencies (approach) in successfully leading, directing, and managing projects. The programme will identify and enhance pre-existing project management knowledge, skills, and experience, and enable each delegate to advance their ability to lead and deliver.

This programme will be customised with examples and exercises tailored to the industries and sectors in which you operate, including law enforcement, medical, fire and rescue, governmental, military, and other sectors.

It is aimed at individuals (from all sectors) seeking a vocation in project management by evaluating their project management skills. FMP validates knowledge and skills in project management at various levels, from those with an ambition to pursue a career as a Project Manager, Senior Project Manager, Programme Manager or Portfolio Manager.

The training can be attended by anyone with the need to understand and apply project management principles to their work in a multidisciplinary ecosystem.

While there are no prerequisites, it is expected that participants will either be working in the field or transitioning into a management role.

By completing the Federated for the Management of Projects (FMP) Level 6 Certificate in Leadership, delegates from LEA will benefit from the following areas that are specifically designed towards LEA officers and staff to manage and lead projects internally leading to improved control, cost predictability, institutional memory, knowledge retention, longer term stability for programmes and alignment with LEA organisational cultures.

3 - 7 November 2025
BOOK NOW 1 - 5 December 2025
BOOK NOW

LEARNING OUTCOMES

• To understand the 14 elements of FMP including the Business Case, Benefits Management, Risk Management, Issues Management, Stakeholder Management, Requirements Management, Information and Knowledge Management, Resource Management, Quality and Assurance Management, Cost and Budget Management, Procurement Management, Planning Management, Monitoring and Control Management & Change Management.
• To understand the FMP 6 Stage cycles of Project Identification, Project Initiation, Project Planning, Project Delivery, Project Close and Measurement of Benefits.
• To understand the processes within each of the 6 Stage areas and states.
• To understand and be able to apply the skills and knowledge to projects with immediate effect.

BENEFITS & OUTCOMES

By completing the FMP course, delegates from LEA will benefit from the following areas specifically targeted towards project management in law enforcement.

• Enhanced cooperation and collaboration among various departments and specialised units as well as with external agencies and international partners
• Efficient Risk Management using supplied FMP tools and techniques that are bespoke to law enforcement assisting LEA to anticipate potential challenges and develop strategies to mitigate these risks
• Enhanced stakeholder engagement, vital for comprehending requirements, establishing priorities, and cultivating trust
• Adaptability and flexibility essential in the ever-changing realm of technology and emergence of new crime types
• The FMP framework offers the essential, field-specific flexibility to adapt to these evolving dynamics
• Personnel Professional Development through improved proficiency in leadership, strategic planning, and critical thinking.

INSTRUCTOR-LED TRAINING (City & Guilds Assured)
LAW ENFORCEMENT PROFESSIONALS ONLY
BLD’s Intelligence Researcher programme was developed in collaboration with the Metropolitan Police Service (MPS). The aim was to develop and deliver a programme to provide Intelligence Researchers with the theoretical knowledge and practical skills required to progress through to accreditation under the Intelligence Professionalisation Programme (IPP).

Using a blended learning model, which combines online learning platforms and classroom sessions, the programme provides the required theoretical knowledge and reinforces this learning through practical exercises, group discussions, and class activities.

This training is City & Guilds Assured

This learning activity has been recognised and assured by City & Guilds, global leaders in learning excellence and quality.  The Assured Benchmark is the training quality standard that City & Guilds has developed with industry experts and is made up of their five core components (and optional where applicable). They also recognise both face-to-face and digital learning, assessed or non-assessed training – and training in local languages.

 8 - 12 September 2025
BOOK NOW

LEARNING TOPICS

• Tasking structures and decision making
  Providing an understanding of the governance structure of tasking processes across policing and how these impact upon a researcher. Delegates are taught how to develop a Terms of Reference and to discuss key points with customers.

• Research methods and skills
  Delivering theoretical and practical skills of researcher methods, focusing on collection, collation and evaluation, basic statistical calculations, and Excel skills.

• Development of intelligence products
  Focuses on the key NIM intelligence products and the information required within these reports.

• Relevant legislation
  Details of the relevant pieces of legislation are provided, ensuring delegates understand the impact and relevance to their role.

• Disseminating research findings
  Delegates are provided with multiple practical exercises which lead to the development of a research summary report and group presentation.  This is the culmination of the learning achieved across the online modules and classroom sessions.

LEARNING OUTCOMES

• Describe the products and processes of the National Intelligence Model
• Detail the role of the Intelligence researcher and explain how it works together with, and supports, other roles within an Intelligence unit
• Explain how to create a terms of reference for a research product
• Describe how to prepare a collection plan to gather information from suitable quantitative and qualitative sources
• Use appropriate statistics and charts when creating a research product
• Recognise faulty thinking and use methods to minimise its impact
• Explain how to ensure that your work adheres to key legal frameworks
• Create a report using appropriate content and structure
• Deliver an oral presentation of the findings of your work
• Review your research product and the process you have used to create it