Get Unlimited Microsoft Training With Your FastPass - Just £6000! Training Centre Now Open - Offering Residential, OIL and Hybrid Courses.

Cyber Crime - Foundation



Only 4 Days



Classroom / Online / Hybrid

Next date

Next date:

9/11/2020 (Monday)


Get an accelerated introduction to the four cyber security pillars of law enforcement: Prepare Prevent, Pursue and Protect. On this fast 4-day Cyber Crime Foundation course, you’ll study practical cyber security concepts and how they can support quick investigations, fast time-to-interview and case disposal.

GCHQ Official Training Provider

You’ll learn to perform computer and network exercises using the latest technologies and equipment. You’ll also build a foundation of IT security knowledge and threats, including:

  • Computing and networking protocols and devices
  • Wireless networking
  • Computer forensic examination
  • Attack vectors
  • Encryption and hashing

Whatever your experience or background within law enforcement, this course will provide you with the foundation of cyber security skills you need.

GCHQ Accredited

This accelerated Cyber Crime Foundation course is CESG (the UK government's national technical authority for information assurance) and GCHQ Certified Training (GCT) accredited. It is listed as a course option on both the National Cyber Security Centre (NCSC) and Civil Service Learning websites.

On this GCHQ accredited course, you'll train with the best and study official GCT courseware.

Six reasons why you should sit your course with Firebrand Training

  1. You'll be trained in just 4 days. You'll learn fast when you're taught by law enforcement professionals
  2. Our course is all-inclusive. A one-off fee covers all course materials, exams, accommodation and meals. No hidden extras
  3. You’ll learn more. Get immersed in the world of cyber crime as you learn from instructors with experience in cyber crime operations and policing
  4. You’ll learn faster. Chances are, you’ll have a different learning style to those around you. We combine visual, auditory and tactile styles to deliver the material in a way that ensures you will learn faster and more easily
  5. You’ll be studying with the best. We've trained over 2,300 police officers across 30+ forces in the UK and gained national coverage in the BBC
  6. You'll do more than study Firebrand's courseware. Get access to the Turing Cyber Suite and study the latest developments in cyber crime


Benefits of Training with Firebrand

  • Two options of training - Residential classroom-based, or online courses
  • A purpose-built training centre – get access to dedicated Pearson VUE Select facilities
  • Certification Guarantee – pass first time or train again free (just pay for accommodation, exams and incidental costs)
  • Everything you need to certify – you’ll sit your exam at the earliest available opportunity after the course - either immediately after your classroom course, or as soon as there are slots available, if you've taken it online
  • No hidden extras – one cost covers everything you need to certify


Core Concepts

Cyber-attacks and cyber-offences

The nature of different cyber-attacks and their correlation to cyber-offences.

Network protocols and network security

The TCP/IP protocol suite with all its supporting protocols and their contribution to security technologies and controls.

Digital currency concepts

Virtual currency as a concept and as a culture expanding into the relevant technologies.

Operating systems

The modern operating systems used in computing devices including computers, game consoles, mobile phones and embedded devices.

Open source intelligence

Using native operating systems commands for performing basic open source intelligence searches.

Cloud and virtualisation

What different types of cloud services are available, how virtualisation works and how it can impact an investigation.

Live digital forensics

Gain an understanding of live digital forensic techniques and the impact they have on the integrity of an investigation.

Principles of digital forensics

Work with a DFI (Digital Forensics Investigator) and understanding what they can do. Gain a basic understanding of ISO 17025.

Principles of digital evidence

The ACPO Principles of Digital Evidence.

Network architectures & topologies

Gain a basic understanding of simple network topologies and architectures, and how different devices can interact with and become part of a network.

Crime scene management

Managing the Digital/Logical Crime Scene.

Relevant legislation

The various areas of legislation that are fundamental to core areas of cyber criminality, such as Computer Misuse Act, Human Rights Act, Data Protection Act and Regulation of Investigatory Powers Act.

Understanding of neurodiversity

Gain an understanding of neurodiversity and the autistic spectrum.

Example Terms, Techniques and Technologies

Cyber-attack and cyber-offence topology

Detailed correlation between attacks and offences expanding into cyber-crime, hacktivism, cyber espionage and cyber warfare.


Protocol purpose, headers and application.

Technical cyber-attacks

Man-in-the-middle, denial of service (including DDoS), defacement, SQLite, malware, backdoors (including misconfigurations), targeted attacks.

Linux/Android operating system

Basic setup of Linux/Android operating systems using virtualisation.

Mac/iOS operating system

Basic setup of Mac/iOS operating systems using virtualisation.

Windows operating systems

Basic setup of Windows operating systems using virtualisation.

Wireless networking

Wireless networking protocols.


How encryption works and its impact on an investigation. Including the difference between encryption types and hashing.

Continuity of evidence & chain of custody

How to maintain and ensure chain of custody for digital devices and evidence.

ACPO Principles of Digital Evidence

Understanding the four principles: Prepare, Prevent, Protect and Pursue.

Exhibit identification & exhibit seizure

Being able to recognise and identify potential sources of digital evidence, and being able to seize different types of storage media.

Games consoles & embedded devices

Types, opportunities and timescales for examinations and likely standard outputs.

Home and business network setups

Typical setups and configurations. Things to consider for both in terms of opportunities and management of scenes.

Initial live device handling

Initial handling of different devices whether live (switched on) or ‘dead box’ (switched off) as well as other devices such as routers.

Legislation and powers


Live digital device risks

Identification and management of potential risks.

Risk assessments

How to complete and review risk assessments.

Scene mapping & scene searching

Physical mapping of a scene involving digital evidence sources, including identifying potential lines of enquiry.

Seizures relating to digital media

The actual process of safely seizing different forms of digital media.


Types, opportunities and timescales for examinations and likely standard outputs.

The Internet of Things (IoT)

Overview of the concept behind IoT.

Learning Objectives

Knowledge and understanding

  • Detailed knowledge of how cyber-attacks correlate to cyber-offences
  • Identifies and communicates clearly principles and concepts of modern networks and operating systems
  • Collects and synthesises information to inform a choice of solutions/enquiries towards the successful prosecution of cyber offences
  • Demonstrates an awareness of specialist cyber resource roles, responsibilities, skills and capabilities
  • Has a broad understand of the concepts surrounding the ACPO Principles of Digital Evidence

Performance and practice

  • Have a broad understanding of network topologies and digital devices that can be found within the modern crime scene
  • Undertakes complex and non-routine tasks for managing cases relating to cyber-offences
  • Interact effectively within a team, giving and receiving information and ideas and modifying responses where appropriate
  • Demonstrates awareness of legislative issues with Computer Misuse Act, Human Rights Act, Data Protection Act, Telecommunications Act, Child Protection Act and Regulation of Investigatory Powers Act, as they apply to evidence handling and cyber incident management
  • Demonstrates safe handling, seizure and transportation of digital evidence and related articles, including associated risks

Exam Track

You’ll sit the following exam during your accelerated Cyber Crime Foundation course:

  • Cyber Crime Foundation exam
    • Online
    • Multiple choice

What's Included

Your accelerated course includes:

  • Accommodation *
  • Meals, unlimited snacks, beverages, tea and coffee *
  • On-site exams **
  • Exam vouchers **
  • Practice tests **
  • Certification Guarantee ***
  • Courseware
  • Up-to 12 hours of instructor-led training each day
  • 24-hour lab access
  • Digital courseware **
  • * For residential training only. Doesn't apply for online courses
  • ** Some exceptions apply. Please refer to the Exam Track or speak with our experts
  • *** Pass first time or train again free (just pay for accommodation, exams and incidental costs)


Before attending this accelerated cybercrime course, you should possess a basic knowledge of the following:

  • Computers
  • Statute and case law in relation to cybercrime
  • The ACPO Good Practice Guide for Digital Evidence

Unsure whether you meet the prerequisites? Don’t worry. Your training consultant will discuss your background with you to understand if this course is right for you.


Here's the Firebrand Training review section. Since 2001 we've trained exactly 76532 students and asked them all to review our Accelerated Learning. Currently, 96.73% have said Firebrand exceeded their expectations.

Read reviews from recent accelerated courses below or visit Firebrand Stories for written and video interviews from our alumni.

"The course tutor was knowledgeable and engaging. There were very welcome practical elements."
C.H.. (11/11/2019 (Monday) to 14/11/2019 (Thursday))

"Content was appropriate, delivered by extremely knowledgeable instructor who kept the class engaged and was able to provide context to real-life scenarios. Well done To The instructor!"
J.T.. (11/11/2019 (Monday) to 14/11/2019 (Thursday))

"A great course to fill my knowledge gaps. Informative and enjoyable."
L.S.. (11/11/2019 (Monday) to 14/11/2019 (Thursday))

"For a student with very basic prior knowledge of this subject I found this course very informative. The pace was suited to be inclusive of a wide knowledge base and time was taken to explain those aspects that were of real relevance to Police investigations.I found it to be particularly useful and instructive to have our tutor, using his policing experience and practical knowledge to underline what and how to achieve best results. "
Ian Short, MPS. (17/6/2019 (Monday) to 20/6/2019 (Thursday))

"Really enjoyed this course. the trainer was knowledgeable and demonstrated a practical understanding also. His delivery style was most engaging and kept the subect matter interesting throughout."
D.B.. (17/6/2019 (Monday) to 20/6/2019 (Thursday))

Course Dates

Cyber Crime - Foundation




Book now

9/11/2020 (Monday)

12/11/2020 (Thursday)


Book now

Latest Reviews from our students