
INSTRUCTOR-LED TRAINING (2 days - CPD Accredited)
For investigators who seek to acquire, cleanse, and interpret cell site and internet communications data. In a physical and digital combined world, there is still a significant importance played by communications data.
When presented alongside other evidence, communications data is a powerful element of a case which can support or undermine other physical evidence. Data available from providers constantly evolves and may change or adapt with technological developments. Investigators need to be educated to identify the opportunities and risks posed by traditional and emerging data sets.
This training is CPD Accredited
Accredited CPD training means the learning activity has reached the required Continuing Professional Development standards and benchmarks. The learning value has been scrutinised to ensure integrity and quality. The CPD Certification Service provides recognised independent CPD accreditation compatible with global CPD requirements.
LEARNING OUTCOMES
- Understand the application process and legislative considerations needed for focused, objective-led communications data acquisition
- Maximise your effectiveness in the acquisition and analysis of communications data
- Recognise key identifiers in communications data records and location-based information
- Focus and analyse through the use of Excel functions and create supporting products
- Evaluate information and draw inferences by maximising opportunities provided by digital identifiers and devices
- Effectively present data to an evidential standard suitable for court

ONLINE SELF-STUDY (CPD Accredited)
The term ‘communications data’ covers a wide range of things, particularly as now that so many activities involve the use of computer networks there is ‘communications data’ relating to almost every aspect of day-to-day life. This course is focussed on mobile telephone data, as collected by the cellular networks and accessible to law enforcement under legislation such as the Investigatory Powers Act.

ONLINE SELF-STUDY (City & Guilds Assured)
Our City & Guilds Assured Cryptocurrency Investigation training is designed for anyone with a need to understand and investigate the ownership and use of cryptocurrencies, such as Bitcoin.
This training was designed by an experienced cybercrime investigator with decades of experience as a police detective. Delegates need no prior knowledge of cryptocurrency as the training builds knowledge from the ground up with no expectation of a technical background.
The training covers a number of essential topics, including cryptocurrency wallets, on-ramps and off-ramps, search and seizure guidance, and mining.
This training is City & Guilds Assured
This learning activity has been recognised and assured by City & Guilds, global leaders in learning excellence and quality. The Assured Benchmark is the training quality standard that City & Guilds has developed with industry experts and is made up of their five core components (and optional where applicable). They also recognise both face-to-face and digital learning, assessed or non-assessed training – and training in local languages.

INSTRUCTOR-LED TRAINING (2 days - CPD Accredited)
LAW ENFORCEMENT PROFESSIONALS ONLY
Don’t let the Dark Web become a nightmare for your investigation. Join us for an introduction to the Dark Web and how as investigators we can safely access, search and evidence what we find.
Explore the Dark Web with our own trainers in this bespoke introduction to accessing and searching the “darkest” corners of the web. Across this course we will explain the legislation and strategies needed, before accessing the Dark Web safely and searching for information to progress your investigations.
This training is suitable for investigators starting out with their Dark Web investigation capabilities. Delegates should have an existing understanding of open-source investigations, such as attending the BLD OSINT training.
This training is CPD Accredited
Accredited CPD training means the learning activity has reached the required Continuing Professional Development standards and benchmarks. The learning value has been scrutinised to ensure integrity and quality. The CPD Certification Service provides recognised independent CPD accreditation compatible with global CPD requirements.
LEARNING OUTCOMES
- Describe the levels of the internet (Clear Web, Deep Web and Dark Web) and what can be accessed at each level.
- Explain IP addressing and how the internet works.
- Practice how to access TOR.
- Describe the alternatives to TOR.
- Identify Darknet Market places.
- Explain Dark Web email services & search engines.
- Recognise different cryptocurrencies.

INSTRUCTOR-LED TRAINING (2 days)
The Digital Search & Seizure training is aimed at staff in a variety of roles including front line, supervisors, forensic scene investigators, POLSA officers, as well as specialist teams. The theme of the training is to take a fresh look at the scene of a search, with a view to identifying the key digital opportunities that exist but may have been overlooked.
LEARNING OUTCOMES
- Identify/secure an electronic crime scene
- Learn how to deal with witnesses and suspects at scenes
- Identify priorities within a scene
- Understand the risk factors in relation to the loss of evidence
- Evaluate on-site opportunities
- Provide strategic advice to SIOs and colleagues
- Provide some guidance around business crime
- Experience the current development of our virtual reality crime scene

INSTRUCTOR-LED TRAINING (1 day)
This training is aimed at front-line officers and staff who come into contact with victims and suspects on a regular basis. It is designed to provide digital skills awareness to maximise opportunities at the earliest stage of any investigation.
The specifics of this delivery will be developed in consultation with the client, with a view to ensuring content is tailored to the needs of the delegates.
Organisational differences in processes and protocols are taken into account so that delegates leave with an understanding of local policies and systems, and how they apply to the digital aspect of any incident.
LEARNING OUTCOMES
- Provide knowledge around the digital world as it relates to everyday situations
- Understand the focus on the evidential opportunities that may be presented from first contact
- Discover how digitally profiling a subject influences an investigation
- Compare the impact of smart devices and associated applications
- Maximise communications data, including internet derived data, through RIPA workflows
- Assess the opportunities presented by public Wi-Fi and be aware of the limitations

INSTRUCTOR-LED TRAINING (1 day)
For supervisors in all roles and fields, this workshop for up to fifty delegates underlines the need for digital investigation awareness across all disciplines of policing.
LEARNING OUTCOMES
- Gain a high-level understanding of the broad range of digital investigation methods available
- Be able to apply methods and strategies to all elements of day-to-day policing
- Identify who in the organisation can provide specialist support in such areas

INSTRUCTOR-LED TRAINING (5 days - City & Guilds Assured)
LAW ENFORCEMENT PROFESSIONALS ONLY
Our Digital Tactical Advisor (DTAC) Investigator (5-day) training is aimed at detectives, intelligence officers, and other investigators who wish to enhance their knowledge and understanding of the digital environment, from both a risk and opportunity perspective within a criminal investigation.
This training is City & Guilds Assured
This learning activity has been recognised and assured by City & Guilds, global leaders in learning excellence and quality. The Assured benchmark is the training quality standard that City & Guilds has developed with industry experts and is made up of their five core components (and optional where applicable). They also recognise both face-to-face and digital learning, assessed or non-assessed training – and training in local languages.
LEARNING OUTCOMES
- Demonstrate an understanding of evolving new technologies
- Understand the role of a Digital Tactical Advisor
- Understand the digital crime scene and its legislative impact
- Evaluate a digital strategy and its real-world impact
- Understand the fundamentals of the cellular network
- Demonstrate confidence in the Investigatory Powers Act 2016
- Demonstrate confidence in cleansing call detail records
- Recognise and evaluate Internet of Things (IoT) devices
- Define IP addressing
- Explain the fundamentals and applications of Open Source
- Understand the principles of the Dark Web
- Explain the basics of Cryptocurrency
- Summarise Vehicle Telematics and their use in an investigation
- Critically analyse the value of Wi-Fi
- Understand the importance of Digital Forensics
- Understand Unmanned Aerial Systems’ data and its value (Drones)
- Gain confidence in presenting digital data as evidence

INSTRUCTOR-LED TRAINING (5 days - City & Guilds Assured)
LAW ENFORCEMENT PROFESSIONALS ONLY
The Digital Tactical Advisor (DTAC) Strategy (5-day) training is tailored for individuals who have already completed the DMI or DTAC Investigator training courses or possess extensive prior expertise in digital investigations. The focus is on honing your strategy writing within the realm of serious crime investigations.
During this intensive course, you will learn how to create comprehensive strategy logs for Senior Investigating Officers. You will cover the considerations that need to be taken into account at various stages of an investigation, enabling you to provide strategic guidance with absolute precision.
You will work through a practical scenario and at each stage learn how to expertly document and present your advice and digital evidence in a format that is not only coherent but easily digestible for all stakeholders involved. The ability to convey complex information with utmost clarity is an indispensable skill that you will master during our programme.
The course will also build upon previous learning of digital investigations by delving into more advanced telecommunications and Digital Forensics techniques.
This learning activity has been recognised as Assured by City & Guilds, global leaders in skills development. Assured is a global quality benchmark that recognises excellence in training and learning. Developed by leading brands in skills development, the Assured benchmark demonstrates how organisations plan, design and deliver their learning programmes to meet world-class quality standards.
LEARNING OUTCOMES

INSTRUCTOR-LED TRAINING (5 days - City & Guilds Assured)
LAW ENFORCEMENT PROFESSIONALS ONLY
The Digital Tactical Advisor (DTAC) Specialist (5-day) training is tailored for individuals who have already completed the DTAC Strategy training course or possess extensive prior expertise in digital investigations.
This is an advanced five-day course designed to equip experienced investigators with the knowledge and practical skills to investigate both established and emerging technologies. The course will build upon previous learning to explore topics including (but not limited to) the analysis of Wi-Fi networks, the use of gaming platforms to trace an individual, accessing and seizing cloud-stored evidence and spoofing of various communications platforms within complex crime investigations.
This learning activity has been recognised as Assured by City & Guilds, global leaders in skills development. Assured is a global quality benchmark that recognises excellence in training and learning. Developed by leading brands in skills development, the Assured benchmark demonstrates how organisations plan, design and deliver their learning programmes to meet world-class quality standards.
LEARNING OUTCOMES
-
Web 3.0
Describe the architecture and key features of Web 3.0 and recognise its potential challenges and opportunities for Law Enforcement. This includes consideration of threats as well as opportunities that Web 3.0 may bring to LEA in the pursuit of criminality -
The Metaverse & other platforms
Demonstrate interaction skills with the metaverse and gaming platforms -
Tracking & Tracing
Identify advanced techniques that could be utilised by Law Enforcement and Offenders to track and trace individuals -
Wi-Fi
Evaluate the value of Wi-Fi to support device attribution -
Faking Comms & Media
Identify and investigate how various methods of communication and multimedia can be faked or imitated -
Cloud-Stored Data
Interpret the technological, legislative and time-critical challenges of evidentially securing cloud-stored data -
Accessing Data
Identify the data available to account holders from social media and technology companies and implement options for investigators to access this data -
Wearable, Health & Medical Tech
Review and reflect on the impacts of wearable, health & medical technology
PRE-REQUISITES

INSTRUCTOR-LED TRAINING (1, 3, or 5 days as required)
LAW ENFORCEMENT PROFESSIONALS ONLY
In today’s digital landscape, the key to successfully locating missing persons lies in leveraging the vast array of digital intelligence available. Our expert-led training equips UK law enforcement investigators with the skills to harness communications data, open-source intelligence (OSINT), and digital forensics in real-world missing person cases.
This course is designed to enhance investigative capabilities, providing practical techniques and real-case applications to improve outcomes in time-critical situations.
Who is this for?
This training is ideal for:
✅ Investigators working within dedicated Missing Person teams, Public Protection and CID.
✅ Officers new to digital investigations who require a strong foundation.
✅ Experienced investigators looking to refine their skills in digital intelligence.
✅ Supervisors overseeing Locate teams who require strategic input on digital methodologies.
LEARNING OUTCOMES
1-Day Essentials Course
A concise introduction to digital investigation techniques for time-sensitive missing person cases.
- Understand the fundamentals of communications data, OSINT, and digital forensics.
- Recognise key digital footprints that can assist in locating individuals.
- Identify quick-win techniques to leverage open-source and device data effectively.
3-Day Investigator Course
A deeper dive into digital investigation strategies, practical application, and case-based scenarios.
- Develop structured methodologies for analysing digital footprints.
- Interpret communications data to determine movement patterns and last-known locations.
- Apply OSINT techniques to uncover key intelligence on persons of interest.
- Use mobile forensics to extract and analyse relevant digital evidence.
- Work collaboratively with partner agencies and digital specialists.
5-Day Advanced Investigator Course
An intensive, hands-on training experience for law enforcement professionals seeking expert-level digital investigative skills.
- Conduct in-depth analysis of telecoms data, including cell site and geolocation intelligence.
- Master advanced OSINT techniques, including social media exploitation and dark web analysis.
- Apply digital forensics methodologies to recover evidence from mobile devices, cloud storage, and computers.
- Understand how digital evidence can be used in legal proceedings and case building.
- Explore real-world case studies and undertake live scenario-based investigations.
Supervisor Input – Strategic Digital Investigation for Missing Persons
A dedicated input for supervisors managing Locate teams, ensuring effective oversight of digital investigative strategies.
- Understand the role of digital intelligence in missing person operations.
- Enhance decision-making through intelligence-led tasking.
- Develop best practices for directing investigators in digital data acquisition.
- Improve coordination with external agencies and digital specialists.
- Identify common pitfalls and challenges in digital investigations.

ONLINE SELF-STUDY (CPD Accredited)
This is aimed at first responders, front-line staff, or those starting their digital investigation journey. This training will provide you with digital prospects that could be part of your daily responsibilities, and the worth of data in enhancing your investigations. This is only an introduction; there will be specialists within your organisation who can assist. BLD will also provide you with further information and specialist advice.
You can contact BLD throughout this course either via the BLD website www.bluelightsdigital.com OR via email using enquiries@bluelightsdigital.com.
None of your personal information is shared with any third party. We may retain your details to provide you with information about additional courses that may be relevant to you.
If you do not want to hear from us, please just let us know using the website or email address previously detailed.
We hope you enjoy the course!

INSTRUCTOR-LED TRAINING (1 day - CPD Accredited)
LAW ENFORCEMENT PROFESSIONALS ONLY
Our MOSOVO Awareness training is aimed at Law Enforcement and is only for those who monitor and investigate members of society who are perceived to present a serious and credible threat to the general public.
This 1-day training provides an awareness of the skills and required digital knowledge when managing violent and sexual offenders.
This training develops existing skills focused on specific types of offenders.
This training is CPD Accredited
Accredited CPD training means the learning activity has reached the required Continuing Professional Development standards and benchmarks. The learning value has been scrutinised to ensure integrity and quality. The CPD Certification Service provides recognised independent CPD accreditation compatible with global CPD requirements.
LEARNING OUTCOMES
- Understand the ways in which a subject may hide their digital activities from their police management officer.
- Understand what can be achieved by examining a home router.
- Understand what can be achieved by using a Wi-Fi ‘sniffing’ program (non-intercept).
- Recognise popular apps designed to hide online activity.
- Recognise current trends in the distribution of IIOC.
- Gain an awareness of the risks to management officers visiting subject premises.
- Understand the three easy ways to spot an SHPO breach: recently used sites, deleted applications, and missing USB devices.

INSTRUCTOR-LED TRAINING (3 days - CPD Accredited)
LAW ENFORCEMENT PROFESSIONALS ONLY
Our MOSOVO training is aimed at Law Enforcement and is only for those who monitor and investigate members of society who are perceived to present a serious and credible threat to the general public.
This 3-day training provides a range of necessary skills and specialist knowledge in the digital environment to identify the relevant opportunities, whilst also weighing up the risks and safeguarding issues.
This training develops existing skills focused on specific types of offenders.
This training is CPD Accredited
Accredited CPD training means the learning activity has reached the required Continuing Professional Development standards and benchmarks. The learning value has been scrutinised to ensure integrity and quality. The CPD Certification Service provides recognised independent CPD accreditation compatible with global CPD requirements.
LEARNING OUTCOMES
- Understand the ways in which a subject may hide their digital activities from their police management officer.
- Understand what can be achieved by examining a home router.
- Understand what can be achieved by using a Wi-Fi ‘sniffing’ program (non-intercept).
- Recognise popular apps designed to hide online activity.
- Recognise current trends in the distribution of IIOC.
- Gain an awareness of the risks to management officers visiting subject premises.
- Understand the three easy ways to spot an SHPO breach: recently used sites, deleted applications, and missing USB devices.
- Learn a full home Wi-Fi router examination to identify undeclared devices.
- Acquire further intel from routers, concerning filesharing applications.
- Use the command line on Windows machines to identify potential SHPO breaches.
- Use triage tools to identify a breach (pre-device seizure only).
- Learn the Internet of Things device recognition.
- Use app-based Open Source Intelligence (OSINT) to identify social media profiles and potential victims.
- Become familiar with the dark web.

INSTRUCTOR-LED TRAINING (5 days - CPD Accredited)
LAW ENFORCEMENT PROFESSIONALS ONLY
Our MOSOVO training is aimed at Law Enforcement and is only for those who monitor and investigate members of society who are perceived to present a serious and credible threat to the general public.
This 5-day training provides a range of necessary skills and specialist knowledge in the digital environment to identify the relevant opportunities, whilst also weighing up the risks and safeguarding issues.
This training develops existing skills focused on specific types of offenders.
This training is CPD Accredited
Accredited CPD training means the learning activity has reached the required Continuing Professional Development standards and benchmarks. The learning value has been scrutinised to ensure integrity and quality. The CPD Certification Service provides recognised independent CPD accreditation compatible with global CPD requirements.
LEARNING OUTCOMES
- Understand the ways in which a subject may hide their digital activities from their police management officer.
- Understand what can be achieved by examining a home router.
- Understand what can be achieved by using a Wi-Fi ‘sniffing’ program (non-intercept).
- Recognise popular apps designed to hide online activity.
- Recognise current trends in the distribution of IIOC.
- Gain an awareness of the risks to management officers visiting subject premises.
- Understand the three easy ways to spot an SHPO breach: recently used sites, deleted applications, and missing USB devices.
- Learn a full home Wi-Fi router examination to identify undeclared devices.
- Acquire further intel from routers, concerning filesharing applications.
- Use the command line on Windows machines to identify potential SHPO breaches.
- Use triage tools to identify a breach (pre-device seizure only).
- Learn the Internet of Things device recognition.
- Use app-based Open Source Intelligence (OSINT) to identify social media profiles and potential victims.
- Become familiar with the dark web.
- Assess the subject’s use of social media platforms using OSINT tools and techniques.
- Understand the legislation concerning the use of such techniques.
- Recognise how to use covert OSINT techniques safely, including tradecraft for the creation and maintenance of a false persona.
- Understand the investigative opportunities linking a subject’s internet use with IP and communications data.

ONLINE SELF-STUDY
A training programme specifically designed for Ofcom staff to assist in the investigation of potential breaches of regulatory, consumer and competition rules, consider complaints and investigate potential non-compliance with Ofcom regulations.

INSTRUCTOR-LED TRAINING (4 days - City & Guilds Assured)
This Open Source Intelligence (OSINT) 4–day training is aimed at investigators in all roles who have a need to search for, identify, acquire, and evidence data that exists on the public internet.
This training is City & Guilds Assured
This learning activity has been recognised and assured by City & Guilds, global leaders in learning excellence and quality. The Assured Benchmark is the training quality standard that City & Guilds has developed with industry experts and is made up of five core components (and optional where applicable). They also recognise both face-to-face and digital learning, assessed or non-assessed training – and training in local languages.
LEARNING OUTCOMES
- Explain the structure of the Internet, and be able to investigate domains and services
- Acquire data in an evidentially robust manner
- Identify evidence and intelligence across a variety of social networks
- Identify other sources of publicly available data about individuals and other entities
- Use mobile apps to add additional depth to research
- Investigate evidence from the dark web and trace cryptocurrency transactions
- Use freely available tools to investigate the integrity and origin of digital images
- Identify ways in which poor configuration of services can be exploited to acquire hidden data

ONLINE SELF-STUDY (City and Guilds Assured)
OSINT is a huge subject area. This course will cover the fundamentals of Open Source Intelligence, as well as touch on a few of the more advanced topics. The list of areas we will cover is as follows...
- Search engines
- Advanced search engines
- Cached search results
- Domain hierarchy and registration
- Whois
- Website hosting trace
- IP address research
- Google Analytics id research
- Forensic image investigation
- Reverse image searching
- Image meta-data analysis
- Mapping tools & features
- Tradecraft in creating and maintaining covert social media profiles
- Social media search techniques
- Other public records
Learning Objectives
- Classify the different levels of Open-Source Investigation
- Demonstrate the requirements of an Open-Source Investigation Strategy
- Use advanced search techniques to improve search results
- Discuss domain hierarchies, the registration process, and investigative opportunities
- Recognise the investigative challenges and opportunities around digital imagery
- Select and utilise appropriate online mapping tools
- Identify appropriate social media search procedures and techniques
- Explain additional investigative opportunities and options available to the online investigator
It is not the purpose of this course to cover legislative issues, as these will change from country to country, and often even within a country, depending upon which company or agency you are working for.
This course will include elements of both non-intrusive and intrusive OSINT, however, there will not be any content relating to Interactive OSINT. This area is highly regulated and legislated, especially concerning law enforcement and public bodies. It is not recommended that you attempt to engage in any form of interactive OSINT without expert legal advice.

INSTRUCTOR-LED TRAINING (1 day)
The Professional Investigation Skills training is for those working in any investigative role, whether the ultimate outcome of an investigation is a criminal trial, a civil court hearing, a tribunal, inquest, or any other internal or external process.
Experienced former police detectives teach delegates the most effective and evidentially-sound ways to interview witnesses and suspects, take written statements, seize and handle exhibits, prepare case files and documentation, devise and document investigation plans that will stand scrutiny, and present any such evidence to the highest standard required in any court or hearing.
LEARNING OUTCOMES
- Be able to identify opportunities arising from an investigation
- Handle and seize exhibits in a robust fashion and maintain their integrity
- Show competence in taking written statements from witnesses
- Demonstrate an understanding of the processes around interviewing witnesses and suspects
- Demonstrate effectiveness with the use of questioning formats
- Understand obligations for case and file preparation
- Understand the principles of disclosure and audit records

INSTRUCTOR-LED TRAINING (5 days - City & Guilds Assured)
(LAW ENFORCEMENT PROFESSIONALS ONLY)
This 5-day course is designed to deliver contextualised content that aligns technologies and methodologies with the practical, day-to-day needs of police users, ensuring its relevance to their specific requirements.
This is a programme in Radio Frequency Technologies (RF) and Tactical Application. The programme covers the skills and knowledge required to tactically advise on the use of RF technologies and police investigations. It teaches cellular network evolution from 2G to 5G, Wi-Fi, and Bluetooth and their practical application as well as the responsibilities in line with the FSR Code of Practice.
This training is City & Guilds Assured
This learning activity has been recognised and assured by City & Guilds, global leaders in learning excellence and quality. The Assured Benchmark is the training quality standard that City & Guilds has developed with industry experts and is made up of five core components (and optional where applicable). They also recognise both face-to-face and digital learning, assessed or non-assessed training – and training in local languages.
TARGET AUDIENCE
The target audience for this course comprises police officers and police staff engaged in RF surveys (RF Techs) or analysts working with Radio Frequency Propagation Survey (RFPS) or Call Detail Records (CDR) information. While prior completion of initial training through the College of Policing is advantageous, it is not a mandatory prerequisite.
There is an expectation that the participants will be from the digital forensic/Cellular investigation sector as this is a specialist programme so literacy and numeracy skills will be required.
LEARNING OUTCOMES
- Demonstrate an understanding of cellular network evolution from 2G to 5G by identifying core network components, explaining air interface principles, and describing the mechanisms for establishing and managing voice calls, text messages, and data sessions across these generations
- Define key survey parameters, implement data collection methodologies for both SIM-based and SDR-based RF equipment, and understand the intrinsic value and relevance of collected data
- Understand Call Detail Records (CDR) analysis, spanning 2G to 5G cellular networks
- Define key parameters relevant to CDR analysis, apply methodologies for collecting, processing, and interpreting CDR data, and grasp the intrinsic value and significance of this information
- Assess the limitations of Cell Site Analysis within the context of law enforcement investigations
- Produce comprehensive and unbiased reports for law enforcement investigations, adhering to established reporting structures, making accurate declarations, and demonstrating awareness of cognitive bias to maintain the integrity and transparency of their documentation
- Understand the responsibilities in forensic science practices and be proficient in adhering to both the Forensic Science Regulator's Code of Practice and ISO 17025 standards
The programme is 5 days in duration and is supported by a Scheme of Work (Course Programme). Materials shared include all lesson plans and PowerPoint slides.
The course content is contextualised to support the new Forensic Science Regulator (FSR) code of practice which came into effect 02 October 2023.