1-Day Workshop · 31 Aug 2026 · Amara Singapore
Digital devices have become an inescapable part of modern life — and so has the evidence they leave behind. This intensive one-day workshop equips investigators and compliance professionals with the practical skills to collect, preserve, and present digital evidence that holds up in court.
What Past Participants Say
"Thank you for conducting the course! I learned new knowledge and am feeling more confident when dealing with digital forensic materials. I'm excited to adopt more best practices and tools."
"Learned new things about digital evidence gathering — especially about the custody of evidence and processes."
"Yes! Appreciate the lesson. We would definitely explore other courses with regards to digital forensics if available."
"The trainer was very patient in guiding all of us, answering our questions and even questions that were out of the syllabus."
"It provides a good overview on the gathering of digital evidence and tools used for analysis of it."
"Thank you! Parameters of extraction and use of digital data made clearer with this course."
Why This Matters
Digital devices have become ubiquitous in everyday life — and in every investigation. But digital evidence that is improperly collected, handled, or documented can be challenged, excluded, or rendered worthless before it ever reaches court.
Digital evidence can be overwritten, corrupted, or destroyed in seconds if not handled correctly. Without the right techniques for identifying, isolating, and acquiring data from mobile devices and computers, critical evidence may be gone before an investigation properly begins.
Even evidence that exists can fail in court. Without a properly documented chain of custody, forensically sound acquisition methods, and preservation protocols that meet legal standards, digital evidence is vulnerable to challenge — and investigators are exposed to scrutiny.
Collecting data is only the first step. Without skills in keyword search, data filtering, metadata analysis, and structured evidence reporting, investigators are unable to extract meaningful intelligence or present their findings in a clear and convincing manner to decision-makers or courts.
About This Workshop
Digital Evidence is a one-day intensive workshop designed to equip investigators, audit officers, compliance professionals, and law enforcement personnel with the practical skills to handle digital evidence across its full lifecycle — from identification and seizure through analysis and court-ready presentation.
Led by a seasoned digital forensics expert with INTERPOL and EUROPOL network credentials and active experience in large-scale cybersecurity incident response, the programme covers all major evidence types across mobile devices, computers, social media, and smart devices.
Who Should Attend
This course is designed for professionals whose work may involve digital evidence — whether as first responders to an incident, investigation officers building a case, or compliance staff conducting reviews. No prior technical background is required.
Participants must bring a Windows laptop that can connect to the internet. Mac laptops and tablets are not suitable for this course.
Key Take-aways
Each take-away is a practised skill — not a concept to remember, but an ability you can apply to a real investigation the moment you return to your desk.
A structured approach to identifying and acquiring digital evidence from mobile devices, computers, social media, and smart devices — using the right techniques and tools to ensure nothing is destroyed, overwritten, or compromised during collection.
The protocols for maintaining chain of custody, preventing data destruction, and storing digital evidence in a manner that satisfies admissibility requirements — so what you collect can be used, not just referenced.
Practical techniques for extracting intelligence from digital evidence — keyword search, data filtering, metadata analysis, and device-specific acquisition — enabling investigators to surface what matters quickly and accurately.
The structure and standards for preparing and presenting digital evidence as a formal report — covering how to communicate technical findings to non-technical decision-makers, disciplinary panels, or courts in a clear, concise, and credible manner.
Programme Outline
The programme moves from evidence fundamentals and legal frameworks through hands-on device acquisition and analysis, culminating in chain of custody design and court-ready evidence presentation.
Pre-Requisites & Equipment
Included in This Course
Good to Know
Our programme is not SkillsFuture-funded. Here is why that works in your favour.
What You'll Gain
After one day, you will have practised every skill — not just observed it demonstrated. Each learning outcome maps directly to investigative capability you can apply immediately.
Recognise the full range of digital evidence types — devices, files, metadata, email, social media, and smart devices — and determine which sources are most relevant to a given investigation.
Execute the legal and procedural requirements for digital search and seizure in Singapore — from on-scene decision-making through device isolation — without inadvertently compromising the evidence.
Use appropriate acquisition methods for mobile devices and computers — including forensically sound imaging, hash verification, and encrypted device protocols — to capture data in a legally defensible form.
Extract actionable intelligence from acquired evidence using keyword search, data filtering, and metadata analysis — and understand what each technique reveals and its limitations.
Design and implement a step-by-step chain of custody process — documenting every point of contact from seizure to court — so evidence integrity can be demonstrated and challenged with confidence.
Prepare a clear, concise, and convincing digital evidence report — structured to meet the standards expected by disciplinary panels, legal counsel, and courts — communicating technical findings to non-technical audiences.
Your Facilitator
Kevin Tan leads digital forensics and incident response (DFIR) investigations into large-scale cybersecurity incidents across Asia Pacific and Europe at Group-IB — one of the world's leading threat intelligence and cybersecurity companies, recognised by INTERPOL, EUROPOL, and top industry analysts including Gartner, Forrester, and IDC.
Kevin has trained law enforcement agencies and government bodies in Singapore, Hong Kong, and Malaysia, and has guest lectured at universities. His professional excellence has been recognised through the FOR608 Challenge Coin, Hacksmith v4.0 Hackathon Winner, and 1st Place at the Belkasoft CTF 2022.
He has presented at prominent international conferences including Black Hat Asia (Arsenal Presenter, 2021) and AUSCERT (Presenter, 2021). His training approach is grounded in live operational experience — every technique, tool, and protocol he teaches is drawn from active DFIR investigations, not classroom theory.
Frequently Asked Questions
Secure Your Place
31 Aug 2026 · Amara Singapore · 9:00 am – 5:00 pm