Communications Data Acquisition & Interpretation

Instructor Led Training - 2 days - CPD Accredited

For investigators who seek to acquire, cleanse, and interpret cell site and internet communications data.  In a physical and digital combined world, there is still a significant importance played by communications data. 

When presented alongside other evidence, communications data is a powerful element of a case which can support or undermine other physical evidence.  Data available from providers constantly evolves and may change or adapt with technological developments. Investigators need to be educated to identify the opportunities and risks posed by traditional and emerging data sets.

Communications Data Acquisition and Interpretation

THIS TRAINING IN CPD ACCREDITED

Accredited CPD training means the learning activity has reached the required Continuing Professional Development standards and benchmarks. The learning value has been scrutinised to ensure integrity and quality. The CPD Certification Service provides recognised independent CPD accreditation compatible with global CPD requirements.

LEARNING OUTCOMES

  • Understand the application process and legislative considerations needed for focused, objective-led communications data acquisition
  • Maximise your effectiveness in the acquisition and analysis of communications data
  • Recognise key identifiers in communications data records and location-based information
  • Focus and analyse through the use of Excel functions and create supporting products
  • Evaluate information and draw inferences by maximising opportunities provided by digital identifiers and devices
  • Effectively present data to an evidential standard suitable for court

 

 

Communications Data – Core Skills for Investigators

Online Self Study - CPD Accredited

The term ‘communications data’ covers a wide range of things, particularly as now that so many activities involve the use of computer networks there is ‘communications data’ relating to almost every aspect of day-to-day life.  This course is focussed on mobile telephone data, as collected by the cellular networks and accessible to law enforcement under legislation such as the Investigatory Powers Act.

 

THIS TRAINING IN CPD ACCREDITED

Accredited CPD training means the learning activity has reached the required Continuing Professional Development standards and benchmarks. The learning value has been scrutinised to ensure integrity and quality. The CPD Certification Service provides recognised independent CPD accreditation compatible with global CPD requirements.

LEARNING OBJECTIVES

  • Understand the application process and legislative considerations needed for focused, objective-led communications data acquisition;
  • Maximise your effectiveness in the acquisition and analysis of communications data;
  • Recognise key identifiers in comms data records and location-based information;
  • Focus and analyse through the use of Excel functions and create supporting products;
  • Evaluate information and draw inferences by maximising opportunities provided by digital identifiers and devices;
  • Effectively present data to an evidential standard suitable for court.

 

Digital Search & Seizure

Instructor Led Training - 2 days
The Digital Search & Seizure training is aimed at staff in a variety of roles including front line, supervisors, forensic scene investigators, POLSA officers, as well as specialist teams. The theme of the training is to take a fresh look at the scene of a search, with a view to identifying the key digital opportunities that exist but may have been overlooked.

Digital Search & Seizure banner

LEARNING OUTCOMES

  • Identify/secure an electronic crime scene
  • Learn how to deal with witnesses and suspects at scenes
  • Identify priorities within a scene
  • Understand the risk factors in relation to the loss of evidence
  • Evaluate on-site opportunities
  • Provide strategic advice to SIOs and colleagues
  • Provide some guidance around business crime
  • Experience the current development of our virtual reality crime scene

 

 

Digital Skills for the Front Line

Instructor Led Training - 1 day

This training is aimed at front-line officers and staff who come into contact with victims and suspects on a regular basis. It is designed to provide digital skills awareness to maximise opportunities at the earliest stage of any investigation.

The specifics of this delivery will be developed in consultation with the client, with a view to ensuring content is tailored to the needs of the delegates.

Organisational differences in processes and protocols are taken into account so that delegates leave with an understanding of local policies and systems, and how they apply to the digital aspect of any incident.

Digital Skills for the Front Line banner

LEARNING OUTCOMES

  • Provide knowledge around the digital world as it relates to everyday situations
  • Understand the focus on the evidential opportunities that may be presented from first contact
  • Discover how digitally profiling a subject influences an investigation
  • Compare the impact of smart devices and associated applications
  • Maximise communications data, including internet derived data, through RIPA workflows
  • Assess the opportunities presented by public Wi-Fi and be aware of the limitations

 

 

Digital Skills for Supervisors

Instructor Led Training - 1 day

For supervisors in all roles and fields, this workshop for up to fifty delegates underlines the need for digital investigation awareness across all disciplines of policing.

Digital Skills for Supervisors banner

LEARNING OUTCOMES

  • Gain a high-level understanding of the broad range of digital investigation methods available
  • Be able to apply methods and strategies to all elements of day-to-day policing
  • Identify who in the organisation can provide specialist support in such areas

 

 

Digital Investigation 101

Online Self-Study - CPD Accredited

This is aimed at first responders, front-line staff, or those starting their digital investigation journey.   This training will provide you with digital prospects that could be part of your daily responsibilities, and the worth of data in enhancing your investigations. This is only an introduction; there will be specialists within your organisation who can assist. BLD will also provide you with further information and specialist advice. 

On-Scene Digital Search & Seizure

Instructor Led Training - 5 days 

The aim of this 5-day On-Scene Digital Search & Seizure training is to develop knowledge and skills around the securing of digital evidence at scene. Learn how to locate devices, capture volatile data, prioritise digital opportunities and record the process. Understand how to triage devices, secure digital exhibits in a forensically sound manner, and capture evidence from the smart home. 

On Scene Digital Search & Seizure banner 

LEARNING OUTCOMES

  • Employ sound planning and search strategies to secure the best evidence.
  • Explain how relevant legislation and ISO accreditation impacts on scene work.
  • Discuss options for locating and evidentially securing digital devices.
  • Demonstrate the decision-making process around prioritisation.
  • Use appropriate methods to record your decision-making process.
  • Evaluate options from non-seizure to on-scene triage to full lab examination.
  • Differentiate between technical triage tool options.
  • Recognise the risks and benefits of manual examination at scene.
  • Use tools to secure volatile data (RAM capture).
  • Explain the considerations around capture of Cloud based data at scene.
  • Identify investigative options for IoT devices, smart TVs and gaming consoles.
  • Demonstrate an understanding of Wi-Fi and examination of home broadband routers.
  • Discuss the investigative value of Wi-Fi Surveys.
  •  

 

 

OSINT (Open Source Intelligence)

Instructor Led Training - 4 days - City & Guilds Assured

This Open Source Intelligence (OSINT) 4–day training is aimed at investigators in all roles who have a need to search for, identify, acquire, and evidence data that exists on the public internet.

OSINT banner City & Guilds logo
This training is City & Guilds Assured

This learning activity has been recognised and assured by City & Guilds, global leaders in learning excellence and quality.  The Assured benchmark is the training quality standard that City & Guilds has developed with industry experts and is made up of their five core components (and optional where applicable). They also recognise both face-to-face and digital learning, assessed or non-assessed training – and training in local languages. 

LEARNING OUTCOMES

  • Explain the structure of the Internet, and be able to investigate domains and services
  • Acquire data in an evidentially robust manner
  • Identify evidence and intelligence across a variety of social networks
  • Identify other sources of publicly available data about individuals and other entities
  • Use mobile apps to add additional depth to research
  • Investigate evidence from the dark web and trace cryptocurrency transactions
  • Use freely available tools to investigate the integrity and origin of digital images
  • Identify ways in which poor configuration of services can be exploited to acquire hidden data

 

 

Open Source Investigation

Online Self-Study - City & Guilds Assured

OSINT is a huge subject area. This course will cover the fundamentals of Open Source Intelligence, as well as touch on a few of the more advanced topics.

OSINT banner City & Guilds logo
This training is City & Guilds Assured

This learning activity has been recognised and assured by City & Guilds, global leaders in learning excellence and quality.  The Assured benchmark is the training quality standard that City & Guilds has developed with industry experts and is made up of their five core components (and optional where applicable). They also recognise both face-to-face and digital learning, assessed or non-assessed training – and training in local languages. 

AREAS COVERED

  • Search engines
  • Advanced search engines
  • Cached search results
  • Domain hierarchy and registration
  • Whois
  • Website hosting trace
  • IP address research
  • Google Analytics id research
  • Forensic image investigation
  • Reverse image searching
  • Image meta-data analysis
  • Mapping tools & features
  • Tradecraft in creating and maintaining covert social media profiles
  • Social media search techniques
  • Other public records

LEARNING OUTCOMES

  • Classify the different levels of Open-Source Investigation
  • Demonstrate the requirements of an Open-Source Investigation Strategy
  • Use advanced search techniques to improve search results
  • Discuss domain hierarchies, the registration process, and investigative opportunities
  • Recognise the investigative challenges and opportunities around digital imagery
  • Select and utilise appropriate online mapping tools
  • Identify appropriate social media search procedures and techniques
  • Explain additional investigative opportunities and options available to the online investigator

It is not the purpose of this course to cover legislative issues, as these will change from country to country, and often even within a country, depending upon which company or agency you are working for. 

This course will include elements of both non-intrusive and intrusive OSINT, however, there will not be any content relating to Interactive OSINT. This area is highly regulated and legislated, especially concerning law enforcement and public bodies.  It is not recommended that you attempt to engage in any form of interactive OSINT without expert legal advice. 

 

 

Wi-Fi Router Investigation

Instructor Led Training - 1 day - City & Guilds Assured

The Wi-Fi Router Investigation programme is suitable for staff who may attend crime scenes to identify evidence of activity, including crime scene investigators, Digital Media Investigators (DMIs), sex offender managers, and dedicated search team staff.

Wi-Fi Router investigation banner City & Guilds logo
This training is City & Guilds Assured

This learning activity has been recognised and assured by City & Guilds, global leaders in learning excellence and quality.  The Assured benchmark is the training quality standard that City & Guilds has developed with industry experts and is made up of their five core components (and optional where applicable). They also recognise both face-to-face and digital learning, assessed or non-assessed training – and training in local languages. 

LEARNING OUTCOMES

  • Demonstrate the relevance of router investigations in Policing
  • Discuss some of the common myths about router investigation
  • Describe the basic formats of IP addressing
  • Identify various types of Hardware
  • Recognise different forms of Router security
  • Recognise the different wi-fi identifiers
  • Locate and interpret DHCP tables
  • Identify currently connected devices
  • Interpret historic log files
  • Discuss the significance of wi-fi surveys and other investigative opportunities

 

 

Internet of Things

As the world around us becomes smarter and increasing digital, you might be surprised to learn how many devices can be used for investigative purposes.

Internet Investigation and Intelligence

Understanding how the internet is structured and how to navigate it effectively is a vital skill for all investigators, learn more in this course.

Digital Crime Scene and Routers

This course provides an overview of handling digital evidence at a crime scene. Learners will explore common devices found at the scene, including mobile phones and other digital media, best practices for seizing digital evidence. It also covers alternative information sources such as routers and Wi-Fi access points.

Disclosure of Communications Data

Instructor Led Training - 1 day

In the modern investigative landscape, managing and disclosing communications data is a critical responsibility.

This training equips professionals with the knowledge and skills to navigate the legal framework, understand key definitions and roles, and ensure compliance with the Criminal Procedure and Investigations Act.

From reviewing large datasets and digital forensic results to preparing disclosure materials for prosecutors, this course provides practical insights into recording, retaining, and redacting sensitive information. 

Disclosure of Communications Data banner

LEARNING OUTCOMES FROM IN-PERSON TRAINING

  • Identify what disclosure is and why we need to comply with obligations under the Criminal Procedure and Investigations Act.
  • Identify key definitions and roles involved in the disclosure process.
  • Distinguish the responsibilities of the different people involved in the disclosure process.
  • Discuss the disclosure test to understand when evidence needs to be disclosed.
  • Discuss the need to record, retain and reveal information throughout an investigation.
  • Analyse methods of reviewing large sets of data such as call data records and the results of digital forensics examinations and the impact on disclosure.
  • Create disclosure material for prosecutors including Disclosure Management Documents and schedules of unused and sensitive material.
  • Examine methods to redact sensitive information from schedules