Advanced certification · Digital forensics & cybercrime
Advanced Digital Forensics & Cybercrime Investigation
Trace it. Prove it. Report it.
Go beyond the basics: examine Windows, Linux, macOS, mobile, cloud, email, CCTV, storage hardware and financial evidence the way cybercrime investigators do.
Instructor: Bharath A
₹5,999
- 2 months
- Duration
- 100%
- Online
- 8
- Modules
- 40+
- Forensic tools used
- 1
- Capstone project
What you’ll learn
Topics covered
- 01Windows Forensics
- 02Linux & macOS Forensics
- 03Mobile Forensics (Android & iOS)
- 04Cloud Forensics
- 05Email, Social Media & OSINT
- 06CCTV, Audio & Video Forensics
- 07Hardware & Storage Forensics
- 08UPI, Financial Crime & Crypto Tracing
- 09Timelines, Reporting & Capstone Project
Overview
About this course
Cybercrime cases rarely sit on a single device. A fraud can start with a phishing email, move through a phone and a cloud account, show up on CCTV and end in a bank statement or a blockchain wallet. This programme trains you to follow that trail across every kind of evidence. Over two months you work through eight practical modules using free and open-source forensic tools: Windows, Linux and macOS systems, Android and iOS extractions, cloud audit records, email and OSINT, CCTV, audio and video, storage hardware, and UPI and cryptocurrency fraud. Throughout, you preserve and verify evidence, correlate it into a timeline, and write findings that clearly state what the evidence does and does not show.
Outcomes
What you’ll be able to do
- 01Collect, preserve and verify digital evidence, creating forensic images and checking them with hash values.
- 02Examine computers, mobile devices and cloud records, and recover selected deleted files.
- 03Analyse system and application activity on Windows, Linux and macOS.
- 04Investigate emails, online activity, CCTV footage, audio and video evidence.
- 05Identify suspicious events and correlate evidence from several sources into a timeline.
- 06Analyse basic financial fraud indicators and trace public cryptocurrency transactions.
- 07Use forensic tools to support findings and validate important results.
- 08Prepare clear forensic notes and reports, including the limitations of the findings.
Who it’s for
Built for four kinds of learner
Digital forensic learners
You know the basics and want deeper, case-style practice across many evidence types.
Police & cybercrime cells
Investigators handling phone, cloud, CCTV, UPI and crypto fraud cases.
Forensic science & IT graduates
Build an advanced, job-relevant skill set and a capstone case for your portfolio.
Banking, fraud & legal teams
Understand how electronic and financial evidence is examined and reported.
Tools
The tools you’ll learn to use
Autopsy
Examining disk images, files and digital evidence in a case
FTK Imager / Guymager
Creating forensic images and checking evidence integrity
Sleuth Kit
Examining file systems, partitions and deleted-file records
Volatility 3
Analysing computer memory, processes and network artefacts
Wireshark / Zeek
Capturing and examining network traffic
ALEAPP / iLEAPP
Examining Android and supported iOS extraction artefacts
MobSF / JADX
Reviewing mobile applications, APK files and permissions
CyberChef / ExifTool
Decoding data, calculating hashes and examining file metadata
FFmpeg / Audacity
Examining and processing video and audio evidence
Plaso / Timesketch
Creating and reviewing timelines from digital artefacts
Etherscan / Tronscan / Gephi
Reviewing public blockchain transactions and their relationships
PowerShell / Linux tools
Collecting and examining system records and logs
Curriculum
8 modules
01Module 1 · Windows Forensics+
Windows files, folders and file systems · Registry records, event logs, USB history and browser activity · finding and recovering deleted files · building a timeline of user activity. Tools: FTK Imager, Autopsy, Sleuth Kit, Event Viewer, PowerShell, ExifTool, PhotoRec.
02Module 2 · Linux and macOS Forensics+
Linux and macOS file systems and system records · login records, system logs, command history and browser activity · identifying suspicious access and persistence-related activity. Tools: Autopsy, Sleuth Kit, Plaso, Timesketch, mac_apt, Linux command-line tools.
03Module 3 · Mobile Forensics (Android and iOS)+
Mobile evidence collection and extraction types · messages, calls, contacts, photos, application data and location-related records · mobile databases and the limits of data recovery. Tools: Autopsy, ALEAPP, iLEAPP, MobSF, ExifTool, DB Browser for SQLite.
04Module 4 · Cloud Forensics+
Cloud evidence and audit records · sign-ins, file access, downloads and sharing activity · identifying unusual account activity and preserving cloud records. Tools: Google Takeout, AWS CloudTrail, Autopsy, DuckDB, LibreOffice Calc.
05Module 5 · Email and Social Media Forensics+
Email headers, attachments and message information · common phishing indicators and suspicious links · basic OSINT investigations using publicly available information. Tools: Thunderbird, CyberChef, ExifTool, Google Admin Toolbox Messageheader, ArchiveWeb.page, ReplayWeb.page.
06Module 6 · CCTV, Audio and Video Forensics+
CCTV and DVR/NVR video formats and media metadata · extracting important video frames and examining audio recordings · media enhancement, editing indicators and the limits of deepfake detection. Tools: Praat, VLC, MediaInfo, Audacity, GIMP, ImageJ, ExifTool.
07Module 7 · Hardware Forensics+
Hard disks, SSDs, USB drives and storage media · creating and verifying forensic images · damaged media, RAID systems, encryption and recovery limitations. Tools: FTK Imager, Guymager, Autopsy, Sleuth Kit, PhotoRec, smartmontools.
08Module 8 · UPI, Financial Crimes and Cryptocurrency Forensics+
UPI and online payment fraud indicators · examining bank statements for suspicious transaction patterns · tracing public blockchain transactions and understanding attribution limits. Tools: LibreOffice Calc, ExifTool, Etherscan, draw.io, Python.
Certification
Earn a certificate you can prove
NextGen Forensic · Certification
CERTIFICATE OF COMPLETION
This certifies that
[ Your name ]
Advanced Digital Forensics & Cybercrime Investigation
VERIFIEDTo be certified you must:
- ✓ Attend the live sessions and complete the module exercises.
- ✓ Pass the module quizzes.
- ✓ Submit the capstone case report.
- ✓ Complete all lessons in your dashboard.
Every certificate carries a unique ID that anyone can check on our verification page.
Our courses provide professional skills certification. They build and evidence examination ability and are not, by themselves, a licence, registration, or appointment to serve as a court-recognised expert witness.
The experience
How the course runs
- 01
100% online
Live interactive sessions with demonstrations and doubt-clearing, all from home.
- 02
Practical exposure
Each module includes hands-on, case-style exercises, so skill is built by doing, not only by listening.
- 03
Capstone project
Bring the modules together on a complete case and present your findings in a report.
- 04
Session recordings
Missed a class or want to revise? Recordings are added to your dashboard after each session.
- 05
Community & doubts
A private batch group plus the NextGen community for questions, case discussion and peer learning.
- 06
Certification on completion
Complete the programme to earn a certificate with an ID anyone can verify online.
Enrolment
Choose your batch
Advanced Digital Forensics & Cybercrime Investigation
The complete 2 months live course
₹5,999
- ›All 8 modules, taught live
- ›100% online
- ›Practical exposure
- ›Capstone project
- ›Session recordings
- ›Community & doubts
- ›Certification on completion
Institutions & batches
For colleges, departments and teams enrolling a group together.
Custom
- ›Group enrolment at institutional rates
- ›Dedicated batch scheduling
- ›Progress reporting for faculty
- ›Optional co-branded certificates
Next batch
November 2026 batch · cohort details
- Starts
- 20 Nov 2026
- Schedule
- Timings shared before the batch starts
- Duration
- 2 months
- Format
- 100% online · live & recorded sessions
Questions
Frequently asked
Do I need to have done the basic Digital Forensic Science course?+
It helps but is not required. You should be comfortable with computers and know what digital evidence, hashing and forensic imaging are. Each module starts with a short recap.
Do I need to buy any software?+
No. The tools used are free or open-source. A laptop or desktop computer is needed for the practical work.
Are the classes live or recorded?+
Both. The programme is 100% online with live sessions, and recordings are made available afterwards so you can revise or catch up.
How do I enrol?+
Create a free account, open this course and click Enrol. You get access to the batch as soon as payment is confirmed.
What do I receive at the end?+
A NextGen Forensic certificate of completion with a unique ID that employers can verify on our website.
How long is the programme and what does it cost?+
Two months. The fee depends on the batch you choose: see the batches and prices in the Enrolment section of this page.
Next batch starts 20 Nov 2026 · Admissions open
Advanced Digital Forensics & Cybercrime Investigation
Go beyond the basics: examine Windows, Linux, macOS, mobile, cloud, email, CCTV, storage hardware and financial evidence the way cybercrime investigators do.