Home

Drop us a line or give us a ring. We'd love to hear from you and are happy to answer any questions.

Exploring the strategic impact of the ICO Digital Data Report on Policing

 

On 2nd July 2020, we ran a webinar for Senior Leaders to discuss the strategic impact of the Information Commissioner’s report on digital data and policing. 

The reality is that digital policing is no longer a specialist subject, it is everywhere and in every investigation. Yet the responses to this essential demand stream remain in the hands of a specialised few.

Our webinar discussed the far reaching consequences of the ICO report, provided key takeaways and signposted towards possible responses that will help drive the digital agenda forward across the policing landscape.

Please contact us for a summary of the webinar and the password to view the recording.

Information Commisioner's Office

Drop us a line or give us a ring. We'd love to hear from you and are happy to answer any questions.

Instructed courses

All of our courses are available to be taught face to face in a classroom.

With the exception of the Drone Investigation course, these courses can also be delivered remotely, with a live feed from the instructor directly to your desktop. We are able to provide the same engaging, instructor-led training that our classroom sessions are renowned for – direct to your screen.

What’s more, we are passing on the savings from training without a classroom venue directly onto you!​

   DIGITAL INVESTIGATION COURSES

   CRYPTOCURRENCY COURSES

   MOSOVO COURSES

   DIGITAL FORENSICS COURSES

   OTHER COURSES

Drop us a line or give us a ring. We'd love to hear from you and are happy to answer any questions.

Digital Tactical Advisor 1 (DTAC1)

(LAW ENFORCEMENT PROFESSIONALS ONLY)

DTAC1 C&G CPD

Our Digital Tactical Advisor One (5-day) course is aimed at detectives, intelligence officers, and other investigators who wish to enhance their knowledge and understanding of the digital environment, from both a risk and opportunity perspective within a criminal investigation. 

This course is City & Guilds Assured

This learning activity has been recognised and assured by City & Guilds, global leaders in learning excellence and quality.  The Assured benchmark is the training quality standards that City & Guilds has developed with industry experts and is made up of their five core components (and optional where applicable). They also recognise both face-to-face and digital learning, assessed or non-assessed training – and training in local languages.

This course is CPD Accredited

Accredited CPD training means the learning activity has reached the required Continuing Professional Development standards and benchmarks. The learning value has been scrutinised to ensure integrity and quality. The CPD Certification Service provides recognised independent CPD accreditation compatible with global CPD requirements.

LEARNING OBJECTIVES

  • Describe the role of a Digital Tactical Advisor in the context of an investigation

  • Acquire communications data from telecoms service providers in accordance with the IP Act

  • Use MS Excel to perform basic data cleaning functions on communication data records

  • Produce annotated maps to show the locations of devices based on CDRs

  • Use non-intrusive open source intelligence techniques to assist in an investigation

  • Describe the operation of the internet and IP addressing

  • Navigate the darknet safely

  • Identify the investigative opportunities from a home wifi router

  • Enumerate the digital investigative opportunities in a number of scenarios

  • Give evidence at court with confidence

  • Mitigate confirmation bias in the context of a criminal investigation

We pride ourselves on our ability to tailor any course to fit your needs, and have experience of bespoking all of our training to a variety of organisations and audiences.

For details of availability and pricing, or to discuss the delivery of a bespoke course for your organisation, please contact us at enquiries@bluelightsdigital.com.

Drop us a line or give us a ring. We'd love to hear from you and are happy to answer any questions.

Digital Tactical Advisor 2 (DTAC2)

(LAW ENFORCEMENT PROFESSIONALS ONLY)

DTAC 2 - Accredited CPD

This course is CPD Certified

Accredited CPD training means the learning activity has reached the required Continuing Professional Development standards and benchmarks. The learning value has been scrutinised to ensure integrity and quality. The CPD Certification Service provides recognised independent CPD accreditation compatible with global CPD requirements.

The Digital Tactical Advisor Two (5-day) course is aimed at those who have completed the DMI course, or who have appropriate previous experience in digital investigations. More complex data sets are introduced, along with the necessity to overlay and compare them in order to draw robust evidential conclusions. Emphasis is placed on strategy, presentation of evidence, and documentation of process.

LEARNING OBJECTIVES

  • Gain confidence in acting as the Digital Tactical Advisor to the SIO for serious and major incidents;
  • Develop skills in strategy writing and documentation, including the acquisition and presentation of complex digital evidence to a court;
  • Understand more complex data sets such as IP logs, GPRS data, and Device Data Records;
  • Be able to deal with cases in which a defence expert may offer contrary evidence;
  • Recognise the evidential limitations of some digital evidence, and manage accordingly.

PREREQUISITES

Delegates wishing to attend the DTAC2 course should have completed the DTAC1 course, an equivalent digital investigation or DMI course, or be able to demonstrate relevant experience in the field of digital investigation tactics.

We pride ourselves on our ability to tailor any course to fit your needs, and have experience of bespoking all of our training to a variety of organisations and audiences.

For details of availability and pricing, or to discuss the delivery of a bespoke course for your organisation, please contact us at enquiries@bluelightsdigital.com

Drop us a line or give us a ring. We'd love to hear from you and are happy to answer any questions.

Cryptocurrency Investigation

Cryptocurrency-Investigation Tab

CITY & GUILDS ASSURED

Our City & Guilds Assured Cryptocurrency Investigation training is designed for anyone with a need to understand and investigate the ownership and use of cryptocurrencies such as Bitcoin.

This course was designed by an experienced cybercrime investigator with decades of experience as a police detective.  Delegates need no prior knowledge of cryptocurrency, as the course builds knowledge from the ground up with no expectation of a technical background.

Over the course of three days, delegates will learn about everything from the origins of Bitcoin in 2008 through to the current developments in the world of digital currencies. The training is constructed around a ‘Strategy of Deanonymisation’, empowering investigators to trace and identify users of anonymous currencies using freely available tools.

The course will also cover a number of essential topics including cryptocurrency wallets, on-ramps and off-ramps, search and seizure guidance, and mining. There are practical exercises throughout, including delegates creating their own wallets, culminating in a ‘mini-investigation in which delegates will be able to put their new skills to the test. As an extra challenge, there is an opportunity for delegates to compete in order to ‘steal’ a small amount of cryptocurrency from the instructor!

Curriculum

  • History & context of cryptocurrency
  • The nature of Blockchain
  • The Bitcoin Core program
  • Cryptocurrency use-cases
  • Hashing
  • Cryptocurrency addresses
  • Keys & wallets
  • Cryptocurrency and OSINT
  • Mixers and tumblers
  • Ransomware
  • Block explorers
  • Address profiling
  • The anatomy of a transaction
  • The meaning & importance of a UTXO
  • Typical and atypical transaction types
  • Co-spending
  • Clustering & cluster tags
  • Deanonymising users
  • Retail exchanges

 

  • Peer-to-peer trading
  • ATMs
  • Vendors & merchants
  • Mining
  • The ‘mempool’
  • Transaction fees explained
  • Physical wallets
  • Hardware wallets
  • Software wallets
  • Hosted wallets
  • Search & seizure
  • Presentation of evidence

Bitcoin with magnifying glass isolated on white background

 

Learning Objectives

  • To introduce the history and global context of cryptocurrency;
  • To understand the fundamental concepts of a currency operated on a decentralized public ledger;
  • To recognise the investigative opportunities and limitations presented by blockchain;
  • To recognise the impact of anonymous addresses on efforts to trace funds;
  • To develop a defined strategy for the de-anonymisation of addresses, establishing lines of enquiry to identify the user of one or more bitcoin addresses;
  • To understand the role of ‘mining’ in the cryptocurrency environment, and the associated risks to infrastructure;
  • To fully understand how to identify and analyse a cryptocurrency transaction using free open source blockchain explorers;
  • To successfully use block explorers to trace criminal assets through multiple addresses;
  • To recognise the role public/private keys and how they are intrinsic to cryptocurrency;
  • To understand the potential for covert tactics that may be employed during an investigation;
  • To recognise the characteristics of a number of cryptocurrency wallets;
  • To understand the various ways in which cryptocurrency can be acquired (on-ramps), the ways in which it can be realised (off-ramps), and recognise the investigative opportunities that are created by both;
  • To evaluate both the legalities and practicalities of cryptocurrency seizures, and develop a ‘best practice’ for a number of scenarios;
  • To recognise the scale of cryptocurrency beyond Bitcoin, and identify key differences between Bitcoin and a number of ‘altcoins’.

We pride ourselves on our ability to tailor any course to fit your needs, and have experience of bespoking all of our training to a variety of organisations and audiences.

For details of availability and pricing, or to discuss the delivery of a bespoke course for your organisation, please contact us at enquiries@bluelightsdigital.com

Drop us a line or give us a ring. We'd love to hear from you and are happy to answer any questions.

Cryptocurrency Investigation - COMPLETE

 

This is a FIVE-day course, which comprises ALL of the learning objectives from:

  • the City & Guilds Assured 3-day Cyptocurrency Investigation course,
  • the Enhanced Cryptocurrency & Chainalysis Reactor Essentials 1-day course,
  • the Chainalysis Reactor Certification (CRC) 2-day course.

Two days of the course will be the Chainalysis Reactor Certification (CRC) which provides practitioners with the knowledge and skills to analyse and trace transactions on the Bitcoin blockchain. This training using Reactor—the tool of choice for investigators, compliance officers, analysts, and regulators.

LEARNING OBJECTIVES

  • The history, purpose, and current political status of bitcoin
  • The principles of blockchain and digital currency
  • Cryptocurrency addresses and different wallet types
  • The methods by which people buy and sell crypto-currency
  • The anatomy of a cryptocurrency transaction
  • Accessing and researching Blockchain data
  • Covert investigative tactics such as address monitoring and ‘dusting’
  • The process of mining, and the potential links to an investigation
  • Seizure and confiscation of cryptocurrency
  • Develop a defined strategy for the de-anonymisation of cryptocurrency addresses and wallets
  • Appreciate the similarities and differences between Bitcoin and several ‘altcoins’
  • Tumblers/mixers;
  • Understanding off-chain payment channels such as Bitcoin’s ‘Lightning’ network;
  • Case studies of cryptocurrency crimes, including a bitcoin investment scam;
  • Conduct transaction analysis and recognize key patterns
  • Leverage open-source intelligence (OSINT)
  • The COMPLETE course includes Chainalysis Reactor Certification – learn to use the world’s leading cryptocurrency investigation platform, after which you may take the CRC assessment to become a Certified user.

LEARNING OBJECTIVES

Cyptocurrency Investigation

  • To introduce the history and global context of cryptocurrency;
  • To understand the fundamental concepts of a currency operated on a decentralized public ledger;
  • To recognise the investigative opportunities and limitations presented by blockchain;
  • To recognise the impact of anonymous addresses on efforts to trace funds;
  • To develop a defined strategy for the de-anonymisation of addresses, establishing lines of enquiry to identify the user of one or more bitcoin addresses;
  • To understand the role of ‘mining’ in the cryptocurrency environment, and the associated risks to infrastructure;
  • To fully understand how to identify and analyse a cryptocurrency transaction using free open source blockchain explorers;
  • To successfully use block explorers to trace criminal assets through multiple addresses;
  • To recognise the role public/private keys and how they are intrinsic to cryptocurrency;

 

  • To understand the potential for covert tactics that may be employed during an investigation;
  • To recognise the characteristics of a number of cryptocurrency wallets;
  • To understand the various ways in which cryptocurrency can be acquired (on-ramps), the ways in which it can be realised (off-ramps), and recognise the investigative opportunities that are created by both;
  • To evaluate both the legalities and practicalities of cryptocurrency seizures, and develop a ‘best practice’ for a number of scenarios;
  • To recognise the scale of cryptocurrency beyond Bitcoin, and identify key differences between Bitcoin and a number of ‘altcoins’.

Enhanced Cryptocurrency & Chainalysis Reactor Essentials

  • Recap of cryptocurrency fundamentals & our Strategy of Deanonymisation
  • A closer look at tumblers/mixers
  • Understanding off-chain payment channels such as Bitcoin’s ‘Lightning’ network

 

  • Case studies of major cryptocurrency crimes, including the 2020 Twitter hack, the Silk Road billion-dollar seizure, and a bitcoin investment scam
  • Chainalysis Reactor Essentials training – including all major features of the software, and a temporary licence

Chainalysis Reactor Certification (CRC)

  • Understand Bitcoin transaction fundamentals
  • Conduct transaction analysis and recognize key patterns
  • Trace the origin and destination of bitcoin
  • Evaluate different categories of actors in the ecosystem
  • Apply techniques to identify services on the Bitcoin Blockchain
  • Leverage open-source intelligence (OSINT)
  • Solve real-world case studies using a full-spectrum of techniques
  • Learn how mixers operate and how to identify them
  • Understand the process of subpoena requests and responses

We pride ourselves on our ability to tailor any course to fit your needs, and have experience of bespoking all of our training to a variety of organisations and audiences.

For details of availability and pricing, or to discuss the delivery of a bespoke course for your organisation, please contact us at enquiries@bluelightsdigital.com

Drop us a line or give us a ring. We'd love to hear from you and are happy to answer any questions.

Chainalysis Reactor Certification (CRC)

 

The Chainalysis Reactor Certification (CRC) credential provides practitioners with the knowledge and skills to analyse and trace transactions on the Bitcoin blockchain. This training using Reactor—the tool of choice for investigators, compliance officers, analysts, and regulators—is provided in a small virtual or in-person classroom setting over TWO days.

LEARNING OBJECTIVES

  • Understand Bitcoin transaction fundamentals
  • Conduct transaction analysis and recognize key patterns
  • Trace the origin and destination of bitcoin
  • Evaluate different categories of actors in the ecosystem
  • Apply techniques to identify services on the Bitcoin Blockchain
  • Leverage open-source intelligence (OSINT)
  • Solve real-world case studies using a full-spectrum of techniques
  • Learn how mixers operate and how to identify them
  • Understand the process of subpoena requests and responses

We pride ourselves on our ability to tailor any course to fit your needs, and have experience of bespoking all of our training to a variety of organisations and audiences.

For details of availability and pricing, or to discuss the delivery of a bespoke course for your organisation, please contact us at enquiries@bluelightsdigital.com

Drop us a line or give us a ring. We'd love to hear from you and are happy to answer any questions.

Enhanced Cryptocurrency & Chainalysis Reactor Essentials

1-day – Remote delivery (max 20) or classroom (max 12)
For delegates who have previously completed our Cryptocurrency Investigation training, this one day additional training course is designed to cover more advanced elements of the topic, and provide a grounding in the use of Chainalysis Reactor, the powerful blockchain intelligence software.  This course was designed by a Certified Chainalysis Training Partner and experienced cybercrime detective, and will include a temporary training license to use Reactor during the training, giving you a hands-on experience of the tools.

LEARNING OBJECTIVES

  • Recap of cryptocurrency fundamentals & our Strategy of Deanonymisation
  • A closer look at tumblers/mixers
  • Understanding off-chain payment channels such as Bitcoin’s ‘Lightning’ network
  • Case studies of major cryptocurrency crimes, including the 2020 Twitter hack, the Silk Road billion-dollar seizure, and a bitcoin investment scam
  • Chainalysis Reactor Essentials training – including all major features of the software, and a temporary licence

We pride ourselves on our ability to tailor any course to fit your needs, and have experience of bespoking all of our training to a variety of organisations and audiences.

For details of availability and pricing, or to discuss the delivery of a bespoke course for your organisation, please contact us at enquiries@bluelightsdigital.com

Drop us a line or give us a ring. We'd love to hear from you and are happy to answer any questions.

Cryptocurrency Awareness

Cryptocurrency

Developed in 2009, cryptocurrency has emerged as a way to store, send, and receive money anonymously. This anonymity makes it attractive to those who wish to use money for illicit purposes, as it removes the ability for investigators to rely on traditional financial investigation methods.

The 1-day Cryptocurrency Awareness course is delivered by a former police cybercrime detective,  experience of investigating the criminal use of cryptocurrency. It will cover the fundamentals of Blockchain, and how digital currencies work from the user perspective. You will learn the ways in which people may acquire cryptocurrency, how it is stored, and you will see first-hand how a transaction is completed.

After this, the course will demonstrate how the public nature of a blockchain gives unique opportunities to an investigator, in terms of tracing money and identifying users.  You will learn techniques that you will be able to use immediately, without need for any specialist software or equipment.

 

LEARNING OBJECTIVES

  • Understand how digital currencies work for a user
  • Develop an understanding around blockchain fundamentals
  • Recognise how to purchase, store and transact with cryptocurrencies
  • Understand what opportunities an investigator has available to them for tracing and identifying users.

We pride ourselves on our ability to tailor any course to fit your needs, and have experience of bespoking all of our training to a variety of organisations and audiences.

For details of availability and pricing, or to discuss the delivery of a bespoke course for your organisation, please contact us at enquiries@bluelightsdigital.com

Drop us a line or give us a ring. We'd love to hear from you and are happy to answer any questions.

MOSOVO (5-day course)

(LAW ENFORCEMENT PROFESSIONALS ONLY)

MOSOVO (5-day course) - CPD Accredited

This course is CPD Certified

Accredited CPD training means the learning activity has reached the required Continuing Professional Development standards and benchmarks. The learning value has been scrutinised to ensure integrity and quality. The CPD Certification Service provides recognised independent CPD accreditation compatible with global CPD requirements.

Our MOSOVO courses are aimed at Law Enforcement only for those that monitor and investigate those members of society that are perceived to present a serious and credible threat to the general public.

This 5-day course will provide a comprehensive range of necessary skills and specialist knowledge in the digital environment to fully identify the relevant opportunities, whilst also weighing up the risks and safeguarding issues.

This course will develop existing skills focused on a specific types of offenders.

LEARNING OBJECTIVES

  • Understand ways in which a subject may hide their digital activities from their police management officer
  • What can be achieved by examining a home router
  • What can be achieved by using a wifi ‘sniffing’ program (non-intercept)
  • Recognising popular apps designed to hide online activity
  • Current trends in the distribution of IIOC
  • Awareness of the risks to management officers visiting subject premises
  • Three easy ways to spot a SHPO breach: recently used sites, deleted applications, and missing USB devices
  • Full home wifi router examination to identify undeclared devices
  • Acquiring further intel from router concerning filesharing applications
  • Using the command line on Windows machine to identify potential SHPO breaches
  • Triage tools to identify a breach (pre-device seizure only)
  • Internet of Things device recognition
  • App-based OSINT to identify social media profiles & potential victims
  • Darkweb familiarisation
  • Assessing the subject’s use of Social Media platforms using Open Source Intelligence tools & techniques
  • Understanding the legislation concerning the use of such techniques
  • Recognising how to use covert OSInt techniques safely, including tradecraft for the creation and maintenance of the false persona;
  • Understanding the investigative opportunities linking a subject’s internet use with IP and communications data

We pride ourselves on our ability to tailor any course to fit your needs, and have experience of bespoking all of our training to a variety of organisations and audiences.

For details of availability and pricing, or to discuss the delivery of a bespoke course for your organisation, please contact us at enquiries@bluelightsdigital.com

Drop us a line or give us a ring. We'd love to hear from you and are happy to answer any questions.