Digital forensic practitioners will encounter digital traces during their examinations which they must take steps to understand and determine their relevance to an investigation. Some of these traces may not have been seen before, either by themselves or the field at large – requiring exploratory work to be conducted in order to determine what they mean. This may involve trying to attribute an ‘activity’ to a trace (what created it) or determine where it came from (its ‘source’). They may also need to determine if an activity has taken place on a system by identifying traces denoting it. In any instances, practitioners may need to design and conduct tests which will help them understand what a trace means. This short course outlines the core principles involved with interpreting digital traces as part of a digital forensic examination. 

The course is intended to be a two day, in person, hands on practical experience that gives digital forensic professionals the knowledge and skills to approach the task of interpreting digital traces. Attendees will:

  • Understand to concept of a digital trace both within the field of digital forensics and the wider context of traces within forensic science.
  • Understand the principles of digital trace interpretation and the competencies involved with doing this task.
  • Understand and engage with the processes and technical procedures linked with designing tests for establishing the meaning of a digital trace. 
  • Understand how to design tests that are robust and repeatable.
  • Understand the implications and impact of test environments.
  • Understand the limitations of any tests constructed.
  • Understand how to compare digital traces and test results.
  • Understand how to evaluate the results of their tests and go on to use this information to form their meaning of a trace.
  • Appreciate how to communicate their opinion on a trace’s meaning and the expectations and implications that surround this.

At a glance

  • Dates
    • 01 - 02 Jul 2025
  • Duration2 days
  • LocationCranfield campus
  • Cost£840

Who should attend

Those in digital forensic roles that are required to interpret digital traces.

Location and travel

Situated close to Milton Keynes and Bedford, the Cranfield campus is situated in Wharley End, very close to Cranfield village, and is about 10 minutes from the M1 motorway.  There is rail and road access to most major airports as well as coach and train stations. Cranfield campus also has its own airport for private executive business travel.

Download a visitor guide including map, directions and health and safety information.

Campus address

College Road
Cranfield
Bedfordshire
MK43 0AL

How to apply

To apply for this course please use the online application form.

Read our Professional development (CPD) booking conditions.