22nd OLAF Digital Forensics and Analysts Training (DFAT)

The training is aimed at staff working for Law Enforcement Agencies that are competent at fighting against fraud and corruption to the detriment of the EU budget. Staff working in EU countries, acceding and candidate countries, EFTA/EEA countries, countries covered by the European Neighbourhood Policy and certain countries with which the EU has concluded an agreement on mutual assistance in customs matters, may apply.

In particular, trainees should work in Digital Forensic, Computer Crime or Analysis units that could be involved in fraud or anti-corruption investigations, including cooperation with OLAF in investigations on the protection of financial interests of the EU.

The following 15 courses will be delivered in 25 sessions.

Forensic courses

Advanced Windows Forensics - 3 sessions (21.03-25.03; 28.03-01.04; 04.04-08.04)
The Advanced Windows® 11 Forensic Exploitation analysis course is an expert-level week-long training event designed for examiners who are familiar with the principles of digital forensics and keen to expand their knowledge on advanced forensics using a host of third-party tools to improve their digital investigations techniques on the latest operating system from Microsoft.

Open Source Intelligence Training (OSINT) - 2 sessions (18.04-22.04; 09.05-13.05)
This course is aimed at those who already have a foundation of knowledge in open source information gathering. It focuses on the investigator's ability to gather information on people, groups, or companies from the Internet.

Live Data Forensics - 3 sessions (28.03-01.04; 04.04-08.04; 18.04-22.04)
During this course, participants will learn how to deal with live computer data and how to analyze it. Differences between regular “dead-box” investigations and investigations on live machines will be explained in detail, with focus on RAM analysis. Main task during this class is to teach the participants different ways of how to acquire Random Access Memory or RAM, of a live machine and how to analyze it with various tools.

Password extraction and data decoding - 1 session (02.05-06.05)
This course is designed to provide participants with detailed study of password extraction and decoding techniques through a variety of lectures, instructor-led and independent hands-on practical exercises. The number of cases involving these mechanisms are growing in numbers every day as encryption and data protection are being implemented by default on many devices.

Macintosh Forensics Basic  - 2 sessions (28.03-01.04; 11.04-15.04)
During this course the participants wil learn apple device overview, apple technology overview, history and major features of macOS, introduction to macOS Desktop, mac OS Directorie, viewing files natively, documentation and reporting, introduction to disk utility, data recovery, collecting volatile data, mac search and seizure best practices, forensic imaging etc.

Internet forensics - 1 session (21.03-25.03)
Training will provide participants with basic knowledge of the computer networks, Internet, web browsers, email and cloud computing along with forensic analysis of various Internet artefacts.

Nuix Foundations Investigations - 2 sessions (25.04-29.04; 16.05-20.05)
The Nuix Forensic Practitioner Foundations certification class will highlight advanced forensic techniques and the key forensic features and functionality within Nuix Workstation by utilizing the application in the following ways: successfully install and configure Nuix Workstation, review the basic operations of Nuix Imager, using Nuix Workstation to crate an investigations case and determine advanced forensic techniques for processing and analysis, outline the various analysis options when working with Windows artifacts.

Linux Forensics Basic - 1 session (09.05-13.05)
The goal of this training is to introduce to the student the power of Linux as a forensic tool. Basic Linux (Sys V) knowledge is required. However, to enable everyone to successfully participate the course will start with Linux-Basics

X-Ways Forensics - 1 session (21.03-25.03)
This main training course is focused on the systematic and efficient examination of computer media using the integrated computer forensics software “X-Ways Forensics”.

Analysis courses

Vound Intella – email analysis - 1 session (11.04-15.04)
Intella Workflows course is designed to share knowledge and best practices in the use and operation of the software. During this 4.5-day advanced class, attendees will be exposed to lectures, guided exercises, and self-paced labs to reinforce best practices leant throughout the learning modules.

Open Source Intelligence training (OSINT) - 2 sessions (11.04-15.04; 25.04.29.04)
This course focuses on the ability to gather information on people, companies and financial data available online only from the free online available sources. In addition to using advanced web searches and other web sites, this course will be leveraging the tools available to look ‘under the surface’ of the internet, accessing data trough database API’s, website crawlers and others.

Basic Operational Analysis Training - 2 sessions (09.05-13.05; 16.05-20.05)
This course will teach trainees how to gather, analyze, and evaluate information from a variety of sources, such as law enforcement databases, surveillance, intelligence networks, or geographic information systems.

IBM i2 Analyst's Notebook Essentials & Advanced - 2 sessions (28.03-01.04; 11.04-15.04)
This hands-on scenario-based training course aims to increase analytical capacities solving different tasks related to investigation and analysis by using specialized tool IBM i2 Analyst’s Notebook 9v, an efficient instrument for fraud, money laundering, and other crime prevention activities and investigations.

Tableau Desktop Fundamentals & Intermediate - 1 session (28.03-01.04)
This course will teach the trainees to simplify, sort and organize data, data extracts and customizations, advance table calculations, dashboards and stories and much more features.

Power BI - 1 session (28.03-01.04) 
This course will teach the trainees how to get started with Microsoft Data Analytics, prepare data in Power BI, design a data model in Power BI, create reports, etc.