Network Investigations

Title: Network Investigations
Year: Apr 2009 – Version 2.0 (Version 3.0 Apr 2019)
Duration: 1 week

Ongoing update

the course is currently in an ongoing update process.

The basic networks is moved to a new full online e-learning course (available by October 2018).

New version of this course will include practical exercises on a criminal investigation scenario with materials developed in the scenario project and is developed in parallel with the Online Investigations project.

Course Aim

This course is aimed at providing students with the knowledge and tools necessary to investigate an incident related to or facilitated by the use of networking technology. Unlike investigations of computer data, where evidence can usually be found on the disk or other associated storage media, network analysis is more concerned with network events and topography to discover or infer what happened and who is responsible.

This course will give students the general and practical knowledge of Networks at an intermediate level using the latest best practice, technologies and techniques available to Law Enforcement specialists.


Ideally students should have successfully completed the ECTEG. Introductory IT Forensics & Network Investigations course, or have some other experience or previous training in network investigations.

To enable students to fully participate in the discussions relating to legislation, it is recommended that prior to attendance students undertake research in respect of their own country’s legislation and how it may impact their investigations.

Students will need to be able to understand and communicate in English.

Short list of agenda / topics / main points

Topics include:

  • TCP/IP Review
  • Net Analysis
  • …/… undisclosed topics

If you are interested in applying for this course please read following page