Cyber Crime - Foundation



Just 5 Days



Classroom / Online / Hybrid

Next date

Next date:

20/3/2023 (Monday)


Get an accelerated introduction to the four cyber security pillars of law enforcement: Prepare Prevent, Pursue and Protect. On this fast 5-day Cyber Crime Foundation course, you’ll study practical cyber security concepts and how they can support quick investigations, fast time-to-interview and case disposal.


You’ll learn to perform computer and network exercises using the latest technologies and equipment. You’ll also build a foundation of IT security knowledge and threats, including:

  • Computing and networking protocols and devices
  • Wireless networking
  • Computer forensic examination
  • Attack vectors
  • Encryption and hashing

Whatever your experience or background within law enforcement, this course will provide you with the foundation of cyber security skills you need.

Our courseware has been approved by APMG, using the NCSC Certified Training scheme criteria for content of courses. Because full NCSC certification of training also specifies approval of both the training delivery and the quality management process, our courseware, whilst approved to a high standard, is not certified under the NCSC scheme

Four reasons why you should sit your course with Firebrand Training

  1. You'll be trained and certified faster. Learn more on this 5-day accelerated course. You'll get at least 12 hours a day of quality learning time in a distraction-free environment
  2. Your course is all-inclusive. One simple price covers all course materials, exams, accommodation and meals – so you can focus on learning
  3. Pass first time or train again for free. Your expert instructor will deliver our unique accelerated learning methods, allowing you to learn faster and be in the best possible position to pass first time. In the unlikely event that you don't, it's covered by your Certification Guarantee
  4. Study with an award-winning training provider. We've won the Learning and Performance Institute's "Training Company of the Year" three times. Firebrand is your fastest way to learn, with 134.561 students saving more than one million hours since 2001


Core Concepts

  1. Cyber-attacks and cyber-offences
    • The nature of different cyber-attacks and their correlation to cyber-offences
  2. Network protocols and network security
    • The TCP/IP protocol suite with all its supporting protocols and their contribution to security technologies and controls
  3. Digital currency concepts
    • Virtual currency as a concept and as a culture expanding into the relevant technologies
  4. Operating systems
    • The modern operating systems used in computing devices including computers, game consoles, mobile phones and embedded devices
  5.  Open source intelligence
    • Using native operating systems commands for performing basic open source intelligence searches
  6. Cloud and virtualisation
    • What different types of cloud services are available, how virtualisation works and how it can impact an investigation
  7. Live digital forensics
    • Gain an understanding of live digital forensic techniques and the impact they have on the integrity of an investigation
  8. Principles of digital forensics
    • Work with a DFI (Digital Forensics Investigator) and understanding what they can do. Gain a basic understanding of ISO 17025
  9. Principles of digital evidence
    • The ACPO Principles of Digital Evidence
  10.  Network architectures & topologies
    • Gain a basic understanding of simple network topologies and architectures, and how different devices can interact with and become part of a network
  11.  Crime scene management
    • Managing the Digital/Logical Crime Scene
  12.  Relevant legislation
    • The various areas of legislation that are fundamental to core areas of cyber criminality, such as Computer Misuse Act, Human Rights Act, Data Protection Act and Regulation of Investigatory Powers Act
  13.  Understanding of neurodiversity
    • Gain an understanding of neurodiversity and the autistic spectrum

Example Terms, Techniques and Technologies

  1.  Cyber-attack and cyber-offence topology
    • Detailed correlation between attacks and offences expanding into cyber-crime, hacktivism, cyber espionage and cyber warfare
    • Protocol purpose, headers and application
  3. Technical cyber-attacks
    • Man-in-the-middle, denial of service (including DDoS), defacement, SQLite, malware, backdoors (including misconfigurations), targeted attacks
  4.  Linux/Android operating system
    • Basic setup of Linux/Android operating systems using virtualisation
  5.  Mac/iOS operating system
    • Basic setup of Mac/iOS operating systems using virtualisation
  6.  Windows operating systems
    • Basic setup of Windows operating systems using virtualisation
  7.  Wireless networking
    • Wireless networking protocols
  8.  Encryption
    • How encryption works and its impact on an investigation. Including the difference between encryption types and hashing
  9.  Continuity of evidence & chain of custody
    • How to maintain and ensure chain of custody for digital devices and evidence
  10.  ACPO Principles of Digital Evidence
    • Understanding the four principles: Prepare, Prevent, Protect and Pursue
  11.  Exhibit identification & exhibit seizure
    • Being able to recognise and identify potential sources of digital evidence, and being able to seize different types of storage media
  12.  Games consoles & embedded devices
    • Types, opportunities and timescales for examinations and likely standard outputs
  13.  Home and business network setups
    • Typical setups and configurations. Things to consider for both in terms of opportunities and management of scenes
  14.  Initial live device handling
    • Initial handling of different devices whether live (switched on) or ‘dead box’ (switched off) as well as other devices such as routers
  15.  Legislation and powers
    • CMA, HRA, DPA, RIPA etc.
  16.  Live digital device risks
    • Identification and management of potential risks
  17.  Risk assessments
    • How to complete and review risk assessments
  18.  Scene mapping & scene searching
    • Physical mapping of a scene involving digital evidence sources, including identifying potential lines of enquiry
  19.  Seizures relating to digital media
    • The actual process of safely seizing different forms of digital media
  20.  Servers
    • Types, opportunities and timescales for examinations and likely standard outputs
  21.  The Internet of Things (IoT)
    • Overview of the concept behind IoT

Exam Track

At the end of your accelerated course, you'll sit the following exam at the Firebrand Training centre, covered by your Certification Guarantee:

Cyber Crime Foundation exam

  • Format: Online and multiple choice

What's Included

Your accelerated course includes:

  • Accommodation *
  • Meals, unlimited snacks, beverages, tea and coffee *
  • On-site exams **
  • Exam vouchers **
  • Practice tests **
  • Certification Guarantee ***
  • Courseware
  • Up-to 12 hours of instructor-led training each day
  • 24-hour lab access
  • Digital courseware **
  • * For residential training only. Doesn't apply for online courses
  • ** Some exceptions apply. Please refer to the Exam Track or speak with our experts
  • *** Pass first time or train again free (just pay for accommodation, exams and incidental costs)


Before attending this accelerated cyber crime course, you should have knowledge in:

  • Computers
  • Statute and case law in relation to cyber crime
  • The ACPO Good Practice Guide for Digital Evidence

Are you ready to get certified in record time?

We interview all applicants for the course on their technical background, degrees and certifications held, and general suitability. If you get through this screening process, it means you stand a great chance of passing.

Firebrand Training is an immersive training environment. You must be committed to the course. The above prerequisites are guidelines, but many students with less experience have other background or traits that have enabled their success in accelerated training through Firebrand Training.

If you have any doubts as to whether you meet the pre-requisites please call (0)8 52 50 01 66 and speak to one of our enrolment consultants, who can help you with a training plan.


We've currently trained 134.561 students in 12 years. We asked them all to review our Accelerated Learning. Currently,
96,55% have said Firebrand exceeded their expectations:

"The course wasn''t technically aimed at me, but gave me an insight into the world of cyber crime, in which my employment sits."
Les Delahunty, HMRC. (10/10/2022 (Monday) to 14/10/2022 (Friday))

"Well ran informative course, set at a good pace."
GM. (10/10/2022 (Monday) to 14/10/2022 (Friday))

"I would recommend. Found the trainer and facilities excellent, can''t fault it."
Philip Jacques. (10/10/2022 (Monday) to 14/10/2022 (Friday))

"Very informative course delivered at a good pace allowing you to learn whilst not being overloaded with information."
Anonymous, City of London Police. (10/10/2022 (Monday) to 14/10/2022 (Friday))

"Technical instructions delivered in a simple to understand format."
Anonymous, Metropolitan Police. (12/7/2021 (Monday) to 16/7/2021 (Friday))

Course Dates

Cyber Crime - Foundation




Book now

10/10/2022 (Monday)

14/10/2022 (Friday)

Finished - Leave feedback


20/3/2023 (Monday)

24/3/2023 (Friday)


Book now

Latest Reviews from our students