Skip to main content
European Anti-Fraud Office
Report fraud
Training and workshops

24th OLAF Digital Forensics and Analysts training

The European Anti-Fraud Office (OLAF) is pleased to inform you that the 24th OLAF Digital Forensics and Analysts training will take place online from 24 April to 2 June 2023.  

The training is financed by the European Union Anti-Fraud Programme (UAFP) (2021-2027). This programme is implemented by the European Commission (OLAF). It was established to promote activities to combat fraud affecting the EU's financial interests.

The training is aimed at staff working for Law Enforcement Agencies that are competent for the fight against fraud and corruption to the detriment of the EU budget. Staff of the Member States, acceding and candidate countries, EFTA/EEA countries, countries covered by the European Neighbourhood Policy and certain countries with which the European Union has concluded an agreement on mutual assistance in customs matters, may apply.

The following courses will be run:

Apple Forensics Fundamentals, 15-19 May 2023

Cellebrite Apple Forensic Fundamentals (CAFF) is a four (4)-day, course designed with hands-on learning and real case scenario data using Cellebrite Digital Collector and Inspector software. Participants will learn how to perform both triage and analysis of specific data points that exist within operating system and file system artifacts. A CAFF instructor will guide attendees through the most important macOS and iOS digital artifacts. Participants will analyze mounted volume evidence, device connection evidence, and network connections in macOS. The macOS and iOS operating systems, HFS+ and APFS file systems and significant application data are explored throughout the class. 

Basic Operational Analysis Training (BOAT), 8-12 May 2023 and 22-26 May 2023:

  • Introduction to Intelligence Analysis
  • Introduction to Financial Intelligence
  • The Benveneti Case
  • Introduction to Case Management
  • Introduction to Mural
  • Sensemaking
  • Charting tools
  • Reporting

I2 Analyst’s Notebook Basic and Advanced, 24-28 April 2023

The course will lead participants through i2 Analyst’s Notebook 9V (thereafter - ANB) features using practical exercises relevant to Intelligence and Law enforcement agencies investigations. Participants will learn to apply program possibilities to achieve the most effective result in the shortest time. They will practice:

  • represent the findings in the most understanding way to others chart readers;
  • import different sets of data, save the time editing data during import and creating specifications for next time;
  • quickly find targeted data and undiscovered networks using several techniques;
  • analyze financial, communication records from different perspectives;
  • apply different search and analysis techniques and discover which feature is more relevant for what task.

In addition to enhancing their knowledge of use advanced analysis techniques for most common daily tasks, they will gain insights on how to exploit it for the target’s behaviour analysis and geospatial analysis.

Intella Advanced, 8-12 May 2023

Vound training courses will prepare you to effectively utilize Intella when conducting a range of tasks such as processing, searching, and producing email and other data for investigations and eDiscovery matters. The Intella Workflows course is designed to share knowledge and best practices in the use and operation of the software. During this 4.5-day advanced class, attendees will be exposed to lectures, guided exercises, and self-paced labs to reinforce best practices leant throughout the learning modules.

Live Data Forensics, 15-19 May 2023

During this course, participants will learn how to deal with live computer data and how to analyze it. Differences between regular “dead-box” investigations and investigations on live machines will be explained in detail, with focus on RAM analysis. Main task during this class is to teach the participants different ways of how to acquire Random Access Memory or RAM, of a live machine and how to analyze it with various tools. The class will show how much data is actually stored in RAM, how to extract it and use is it in everyday digital forensic investigations.

Osint Analytics, 24-28 April 2023 and 22-26 May 2023

OSINT Analytics course is a specialist course aimed for experienced analysts who are new to the field of OSINT investigations and who are involved in financial investigations in their everyday work, such as money fraud and embezzlement, tax evasion, money laundering, financial data manipulation, scams.

It is an entry-level course and provides basic knowledge on conducting OSINT investigations, setting up the forensic workstation, financial analysis and finding business information.

This course focuses on the ability to gather information on people, companies, and financial data available online only from the free online available sources.

Password Extraction and Data Decoding, 29 May-02 June 2023

This course is designed to provide participants with detailed study of password extraction and decoding techniques through a variety of lectures, instructor-led and independent hands-on practical exercises.

Throughout the class topics covered will include differences between encryption and password protection, PGP, hashing, full disk encryption and file encryption, entropy, 2 factor authentication, password managers, Bitlocker, FileVault, EFS, UFS, KeyChain, memory analysis, Office documents and many other concepts and applications of both encryption and passwords.

Python Scripting, 8-12 May 2023

This basic level course in intended for those digital forensic examiners, investigators, cyber security specialists or analysts who don't have any previous programming experience, but are interested in understanding programming codes. The fundamentals of this class are hands on with scripting/automating digital forensic problems. Scripts used in this class cover different fields of Digital Forensics such as computer, mobile, network, OSINT and general forensic analysis.

Uav(Drone) Forensics, 22-26 May 2023

This advanced level course will equip students with the practical skills and competences required to identify and extract various sources of data recoverable from Unmanned Aircraft Systems also known as Drones, including their associated control devices, in line with approved best practices. Attendees will learn how to collect data from within the aircraft using non-destructive processes utilizing industry-standard tools to create forensic collections of storage media that include flight logs, aircraft data, photo and video files without the need to disassemble the aircraft or controller.

Windows 11 Advanced Forensic Exploitation, 15-19 May 2023

This is an expert level course designed for examiners who are familiar with the principles of digital forensics and keen to expand their knowledge on advanced forensics using a host of third-party tools to improve their digital investigations techniques on the latest operating system from Microsoft. The participants will gain knowledge on hot to process the latest chromium browser, deal with BitLocker encryption, analyse the new Windows Photos app, examine Windows Helium based apps, exploit the Windows Subsystem for Linux and Android, etc.

  • fraud against the EU | fraud prevention
  • Monday 24 April 2023, 09:00 - Friday 2 June 2023, 17:00 (CEST)
  • Online only

Practical information

Monday 24 April 2023, 09:00 - Friday 2 June 2023, 17:00 (CEST)
Online only


General contact


For more information, please contact the OLAF C3 DFAT team at: OLAF-FMB-FORENSICTRAININGatec [dot] europa [dot] eu (OLAF-FMB-FORENSICTRAINING[at]ec[dot]europa[dot]eu)