Practical digital guidance for investigators — and for the people around investigations who need to understand what digital issues mean, what to do next, and how to use specialists properly.
Not to turn you into a technician. Not to replace DFUs, analysts or digital specialists. The point is to make sure you understand enough to ask better questions, identify sensible lines of enquiry early, and stay in control of the case.
No generic awareness material. No vendor fluff. No technical theatre.
Replace this box with your recorded front-page explainer video.
This is built around the questions people actually ask in live work — not abstract cyber jargon and not exam-syllabus nonsense.
Investigators run investigations.
DFUs, technicians, analysts and digital specialists are essential. This is not anti-specialist. Quite the opposite. The point is to use them properly, ask better questions earlier, and understand what you are actually asking them to do.
Without enough understanding, investigators risk missing opportunities, wasting resources, asking the wrong questions, or misunderstanding what digital evidence really shows.
Investigator First Digital exists to stop that happening.
So you can get to the point quickly, then go deeper only where it actually helps.
What you are looking at, why it matters, what it can and cannot support, and where people commonly get it wrong.
What this means in an investigation. Sensible lines of enquiry, what to ask, where to focus, and what should happen next.
The technical explanation where it genuinely helps — how systems behave, what likely happened underneath, and where evidence may sit.
Not abstract topic lists. Real investigative questions, real uncertainty, and practical next steps.
The point is not to leap from “IP address” to “person”. The point is to understand what that address actually narrows down, what it does not, and what lines of enquiry flow from it.
What this means
What to do
He uses a credential-capture method such as a keylogger or similar compromise technique. The investigative question is not whether Dave is clever. It is what had to happen, what traces that could leave, and what that should make you look for.
What this means
What to do
The centre of gravity is the investigator. But the same material is useful to the people around investigations who need grounded digital understanding to support real casework.
People directing lines of enquiry, deciding what to prioritise, and working out what digital issues actually mean in a case.
People who need to understand what digital issues mean, what they support, what they do not support, and what a sensible response looks like.
A limited early adopter offer is available for a small number of organisations that want early access and are willing to help shape the library through practical feedback.
The users do not all need to sit in one department. The licence can cover relevant colleagues across the same organisation where that makes practical sense.
If that sounds useful, the early adopter offer is the place to start.