Cybercrime Investigations
Cybercrime investigation joins technical evidence to people, money and intent. This course runs a case from first report to a file that holds up: framing the question, working online identities, following the money, and preserving what you find.
You cover fraud patterns, cryptocurrency tracing, criminal marketplaces and disclosure obligations, with an emphasis on investigative workflows that survive legal process rather than clever one-off tricks.
- Duration
- 8 weeks
- Format
- Live online, instructor-led
- Prerequisites
- None required
- Class size
- Capped at 12 learners
What you will be able to do
- Frame an investigative question that the available evidence can answer
- Build and maintain an online persona without exposing your organisation
- Pivot between accounts, usernames, emails and infrastructure to link activity
- Capture web and social media evidence so it can be authenticated later
- Trace cryptocurrency payments through addresses, clusters and exchanges
- Recognize fraud typologies including payment diversion and mule networks
- Prepare records and requests that platforms and banks will act on
- Produce a case file with exhibits, notes and disclosure ready material
Course outline
6 modules
- Framing an investigative question
- Legal authority, jurisdiction and scope
- Investigation planning and hypothesis management
- Handling online material as evidence
- Working with counsel, police and platform teams
What you need before you start
- General internet literacy and research ability
- No forensic background required, though it helps in places
- A computer you can install research tooling on, ideally not your daily machine
- Discretion, since exercises involve sensitive investigative technique
Who this course is for
- Corporate investigators and fraud teams
- Police and regulatory investigators moving into online cases
- Insurance and financial crime analysts
- Security staff who investigate incidents with a criminal dimension
- Legal and compliance professionals who commission investigations
Questions about this course
More in digital forensics and incident response
Entry-levelDigital Evidence Acquisition and Rapid Triage
Hands-on digital forensics training in Toronto covering defensible imaging, live triage, write blocking and hashing that stands up to challenge.
6 weeks · live online
Contact for pricingView outline
Entry-levelWindows Forensic Analysis
Windows forensics training in Toronto covering registry, execution artifacts, shell items, USB history, email and browsers through a full capstone case.
10 weeks · live online
Contact for pricingView outline
CoreAdvanced Incident Response and Threat Hunting
Threat hunting training for responders ready to find intrusions in progress using memory forensics, lateral movement evidence and super timeline analysis.
10 weeks · live online
Contact for pricingView outline
Ready to launch your cyber security career?
Join the next live online cohort. No experience required, just bring the curiosity.