In this module, the focus is on mobile devices including phones, and tablets. You will learn about the types of evidence that can be obtained from such devices, and how this differs when compared to more traditional computer forensics in relation to both the evidential opportunities, and the challenges that the devices present.¿ You will also learn how to triage devices in an evidential way, and then extract and examine data from a range of mobile data sources and devices – making use of industry standard tools.¿ Finally, you will learn crucial steps in the preservation of recording of the obtain evidence, to ensure that your findings are forensically valid and admissible in court.¿¿



Alignment to duties under the Digital Forensic Technician Apprenticeship Standard:¿



2) Use approved scientific methodology and rationale to support investigations also providing advice as to whether further specialist digital support may be required.¿

3) Ensure the appropriate capture and preservation techniques for digital forensic material applying standard methodology and utilising appropriate forensic science technology for digital examinations (specific tool training may be required).¿



Alignment to the following KSBs:



K 1, 2, 3, 4, 5, 6, 7, 8, 9, 12, 14, 15, 17, 20¿

S 2, 3, 4, 5, 6, 7, 9, 10, 11, 12, 13, 17, 22¿

B 1, 3, 7¿

Apprentices should complete these assessments as a demonstration of competence and receive a pass/fail outcome for the work. Apprentices completing the module for credit towards a CertHE will receive summative assessment marks as per the weightings given.



To reflect the tasks expected of a Digital Forensic Technician, you will be provided with a mobile device data set for analysis in line with provided parameters, the first part of the assessment tasks is to produce a set of contemporaneous notes during the analysis; in doing so you will demonstrate your understanding of how to apply the skills you have learnt (LO1). Secondly, you should generate a supporting SFR that showcases your ability to successfully communicate your findings (LO2); the SFR process is being utilised by Forces across England and Wales – knowing how to report in this way means you will develop understand how to comply with the Criminal Procedure Rules in an effective manner.

The module will be taught through a mixed approach to learning, providing you with an opportunity to practice new skills and develop knowledge within both a structured face-to face environment and through guided online discussions and webinars. This will align with the expectations of the employer to support on the job learning.¿

Towards the end of this module, you will receive further guidance towards completing the module assessment and collection of evidence for completion of the EPA portfolio. During this time, you will also be supported in your personal and professional development.¿

Optimise digital evidence capture and sequencing, mastering terminology, national best practices, and local procedures for secure forensic device progression.

Analysis¿

Communication¿

Application¿



Navigate diverse forensic situations by selecting and utilising appropriate tools, ensuring evidence chain of custody, and documenting findings effectively.

Analysis¿

Application¿

Reflection¿

Kävrestad, J. (2020) Fundamentals of Digital Forensics. Springer International Publishing.¿
Casey, E. (2019) Handbook of Digital Forensics and Investigation. Academic Press.¿
ACPO (2011) ACPO Good Practice Guide for Digital Evidence.¿
FSR (2023) Forensic Science Regulator Code of Practice.¿

ADF Digital Evidence Investigator

Dive into the world of mobile forensics to equip yourself with the skills and knowledge to navigate the unique challenges and opportunities of these devices. Discover the vast array of evidence you can extract from mobile devices, from text messages and call logs to social media data and location history. Understand how mobile forensics differs from traditional computer investigations, exploring both the enhanced evidentiary potential and the unique challenges posed by these compact devices. Finally, explore the art of forensic device triage, determining the most critical devices to investigate and prioritising your efforts for maximum efficiency.