eFirst: First responders e-learning package

Project description

Being the initial actors in contact with potential electronic evidence, Law Enforcement First responders (patrol police officers, detectives, border and tax controllers) are crucial within the forensic process, influencing the efficiency of criminal investigations. This self-paced e-learning package focuses on essential IT forensics and IT crime knowledge for first-line police officers without IT expertise.

The deliverable also solves the ever-challenging “pre-requisite” topics required before residential training, while providing a common sound reference for all Law Enforcement First responders and attendees to advanced-level IT forensics courses.

With an expected audience of over 1.5 million first-line officers in Europe, this course package is available free of cost to all Law Enforcement Agencies (LEA), enabling additional organisation or country-related content to be included.

The training materials are kept up-to-date and maintained by a core group of EU LEA cybercrime experts, allowing to:

• Identify and seize potential electronic evidence, including “live data” forensics.
• Gain awareness on digital forensics, cybercrime, the Internet and its services, the Internet of Things, encryption/decryption, dark web, cryptocurrencies, and other topics.
• Assist victims of crimes facilitated by the use of new technologies when taking a complaint (asking specific crime-related questions), starting a criminal case, and providing first help and basic advice on these types of crimes.
• Advise on how to use the NOMORERANSOM tools and other non-commercial solutions.
• Facilitate communication, reporting and further investigation, by explaining the types of traces that can be recovered by specialised forensic examiners and how they may contribute to investigative processes.
• Serve as a repository or knowledge base of cyber essentials.

Development: background and next steps

An ECTEG flagship initiative, eFirst came to life in 2013 to provide First responders with basic knowledge of digital forensics tools and practices, combining live data forensics with general awareness and understanding of cyber-dependent and cyber-enabled crimes. This initial version was translated into over 14 EU languages (plus some additional ones via international partners), and localised to match national guidelines and refer to each country’s legal framework.

Besides prior specific review processes, since 2023 a team of over 30 cybercrime experts from 13 Law Enforcement Agencies in the European Union have been updating and optimising the product. The eFirst 2.0 version (expected for the end of May 2024) features indispensable content updates, a streamlined training path, up-to-date electronic evidence good practices and seizure tips requested by the end-users.

After the new version is available, the next steps involve:

• Translation into EU languages and localisation, with regular update cycles.
• Possible launch of a spin-off product for Judicials, in cooperation with Eurojust and the European Judicial Cybercrime Network.
• Translation in other non-EU languages, by partners UNODC, OSCE and the Council of Europe, to aid in an inclusive and global fight against cybercrime.

Project partners and contributors

These LEAs have collaborated in the training material development:

• Polícia de Segurança Pública (Portugal)
• Portuguese Judicial Police (Portugal)
• Portuguese National Guard (Portugal)
• Polish Cybercrime Bureau (Poland)
• Politie Academie (Netherlands)
• Swedish Cyber Crime Center (Sweden)
• Swedish Customs (Sweden)
• An Garda Schíochána (Ireland)
• Baden-Wuerttemberg State Police College (Germany)
• Guardia Civil (Spain)
• Polizia di Stato (Italy)
• Servizio Polizia Postale e delle Comunicazioni (Italy)
• Hellenic Police (Greece)
• Danish Police (Denmark)
• Finish Police University College (Finland)
• Universidad Autónoma de Madrid (Spain)
• Romanian Police (Romania)
• Romanian Prosecutor Office (Romania)
• French Gendarmerie (France)
• Cypriot Police (Cyprus)
• Norwegian Police University College (Norway)
• Antwerp Local Police (Belgium)
• Brussels Local Police (Belgium)
• Hessen Police Academy (Germany)

The project continuity is also possible thanks to funding from the European Commission and the kind support from University College Dublin, Europol, CEPOL, Council of Europe, OSCE and UNODC.

Languages

The main version is developed in English. Localised versions in EU and additional languages will be produced after May 2024. The expected languages to be covered are:

These and other translations will be added as they become available.