Computer Forensic Examiner
Course details
2026
| Session(s) | Location | Start date | End date |
|---|---|---|---|
| 26-01 English | Ottawa | 2026-02-09 | 2026-02-27 |
| 26-02 English | Ottawa | 2026-05-25 | 2026-06-12 |
| 26-03 English | Ottawa | 2026-11-02 | 2026-11-20 |
| Tuition |
|---|
| $8,200.00 |
Notes
- Accommodations are offered to course participants. Our rooms are subject to availability and the request must be indicated on the course registration form
- Meal plans are offered to course participants. The specific meal plan must be indicated on the course registration form
- Travel grant funding is available to our non-federal law enforcement agencies
Description
This course is for investigators who search, seize and analyse potential digital evidence found on personal computer hardware. It examines specific techniques used for recovery, authentication, and analysis of digital data and how to ensure evidence is isolated and extracted and holds up in a court of law. A combination of theory, demonstrations and hands-on exercises are used to teach the principles and advanced techniques used in computer forensic methodology.
Format and delivery
- Length of course
- 15 days
- Class size
- Maximum 20 participants
- Delivery setting
- Combination of a computer classroom and a computer laboratory
Learning outcomes
- Describe and apply search and seizure methodologies
- Explain the physical and logical layouts of digital data and how these aspects are related
- Describe the file system features of the File Allocation Table (FAT) and the New Technology File System (NTFS) and explain how data is stored in these file systems
- Describe computer related material in an information to obtain and/or search warrant
- Conduct the search and seizure of a stand-alone personal computer system and associated data stores
- Acquire and preserve digital evidence for examination purposes
- Perform a forensic analysis of seized computer system data and prepare a report of this analysis
Eligibility and mandatory requirements
- This course is offered to digital forensic analysts working in a technological crime investigative unit or program
- Acceptance or refusal in the course is at the discretion of the Canadian Police College
Assessment
- Success in the course is based on attendance, participation and successful completion of all required assignments and learning evaluations
- Various evaluation methods are used, including three written exams, a final practical assessment and an assessment of a course scenario report
- Re-testing or re-evaluation is conducted in accordance with the CPC Academic Directives and at the discretion of the Canadian Police College
Contact
For more details or other information about the course, please email cpc_registrar-registraire_ccp@rcmp-grc.gc.ca.
- Date modified: