1-Day Workshop · 31 Aug 2026 · Amara Singapore
Digital devices have become an inescapable part of modern life — and so has the evidence they leave behind. This intensive one-day workshop equips investigators and compliance professionals with the practical skills to collect, preserve, and present digital evidence that holds up in court.
What Past Participants Say
"Thank you for conducting the course! I learned new knowledge and am feeling more confident when dealing with digital forensic materials. I'm excited to adopt more best practices and tools."
"Learned new things about digital evidence gathering — especially about the custody of evidence and processes."
"Yes! Appreciate the lesson. We would definitely explore other courses with regards to digital forensics if available."
"The trainer was very patient in guiding all of us, answering our questions and even questions that were out of the syllabus."
"It provides a good overview on the gathering of digital evidence and tools used for analysis of it."
"Thank you! Parameters of extraction and use of digital data made clearer with this course."
Why This Matters
Digital devices have become ubiquitous in everyday life — and in every investigation. But digital evidence that is improperly collected, handled, or documented can be challenged, excluded, or rendered worthless before it ever reaches court.
Digital evidence can be overwritten, corrupted, or destroyed in seconds if not handled correctly. Without the right techniques for identifying, isolating, and acquiring data from mobile devices and computers, critical evidence may be gone before an investigation properly begins.
Even evidence that exists can fail in court. Without a properly documented chain of custody, forensically sound acquisition methods, and preservation protocols that meet legal standards, digital evidence is vulnerable to challenge — and investigators are exposed to scrutiny.
Collecting data is only the first step. Without skills in keyword search, data filtering, metadata analysis, and structured evidence reporting, investigators are unable to extract meaningful intelligence or present their findings in a clear and convincing manner to decision-makers or courts.
About This Workshop
Digital Evidence is a one-day intensive workshop for investigators, audit officers, compliance professionals, and law enforcement personnel. Participants learn how to identify, preserve, acquire, analyse, and present digital evidence using forensically sound and legally defensible methods.
Led by a seasoned digital forensics expert with INTERPOL and EUROPOL network credentials and active experience in large-scale cybersecurity incident response, the programme covers all major evidence types across mobile devices, computers, social media, and smart devices.
Who Should Attend
This course is designed for professionals whose work may involve digital evidence — whether as first responders to an incident, investigation officers building a case, or compliance staff conducting reviews. No prior technical background is required.
Participants must bring a Windows laptop that can connect to the internet. Mac laptops and tablets are not suitable for this course.
Key Take-aways
Each take-away is a practised skill — not a concept to remember, but an ability you can apply to a real investigation the moment you return to your desk.
Recognise relevant digital evidence across mobile devices, computers, storage media, cloud platforms, websites, and online services — and understand how to handle them without compromising evidential value.
Understand practical acquisition methods for mobile devices and computers, then examine user activity, communications, metadata, and digital artefacts to identify investigative leads.
Apply proper preservation, documentation, verification, and chain of custody procedures to maintain evidence integrity and support admissibility requirements.
Prepare structured investigation reports and communicate technical findings clearly to supervisors, disciplinary panels, legal counsel, and courts.
Brief Programme Outline
Pre-Requisites & Equipment
Included in This Course
Designed for Operational Reality
Digital evidence changes rapidly. Devices, applications, cloud platforms, and evidence sources evolve continuously. This workshop is designed to remain practical, current, and directly relevant to modern investigations.
What You'll Gain
After one day, you will have practised every skill — not just observed it demonstrated. Each learning outcome maps directly to investigative capability you can apply immediately.
Recognise the full range of digital evidence types — devices, files, metadata, email, social media, and smart devices — and determine which sources are most relevant to a given investigation.
Conduct evidence assessment, documentation, preservation, and handling activities using recognised digital forensic principles and investigative best practices.
Use appropriate acquisition methods for mobile devices and computers — including forensically sound imaging, hash verification, and encrypted device protocols — to capture data in a legally defensible form.
Examine user activity, communications, metadata, websites, and digital artefacts to identify investigative leads and evidential findings.
Document evidence handling, storage, transfer, and verification activities in a manner that supports integrity, accountability, and admissibility requirements.
Prepare a clear, concise, and convincing digital evidence report — structured to meet the standards expected by disciplinary panels, legal counsel, and courts — communicating technical findings to non-technical audiences.
Your Facilitator
Kevin Tan leads digital forensics and incident response (DFIR) investigations into large-scale cybersecurity incidents across Asia Pacific and Europe at Group-IB — one of the world's leading threat intelligence and cybersecurity companies, recognised by INTERPOL, EUROPOL, and top industry analysts including Gartner, Forrester, and IDC.
Kevin has trained law enforcement agencies and government bodies in Singapore, Hong Kong, and Malaysia, and has guest lectured at universities. His professional excellence has been recognised through the FOR608 Challenge Coin, Hacksmith v4.0 Hackathon Winner, and 1st Place at the Belkasoft CTF 2022.
He has presented at prominent international conferences including Black Hat Asia (Arsenal Presenter, 2021) and AUSCERT (Presenter, 2021). His training approach is grounded in live operational experience — every technique, tool, and protocol he teaches is drawn from active DFIR investigations, not classroom theory.
Frequently Asked Questions
Secure Your Place
31 Aug 2026 · Amara Singapore · 9:00 am – 5:00 pm