Skip to main content
U.S. flag

An official website of the United States government

Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.


Secure .gov websites use HTTPS
A lock () or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Digital Forensics Investigator Level 2 Program

11 Training Days
Locations Offered


The Digital Forensics Investigators 2 (DFI-2) Program formerly the Digital Evidence Acquisition Specialist Training Program (DEASTP) is designed to equip investigators with the knowledge, skills, and abilities to properly identify, seize and acquire digital evidence. During the first week of this program, students will be exposed to Mobile Device Investigations Training. Note: Saturday is a full training day. During the second week of this program, students will enhance their knowledge and skills with the addition of the Digital Evidence Acquisition training.  Through a combination of lecture, demonstration, hands on exercises, labs and a practical exercise. Investigators learn how to seize digital evidence from computers, computer hard drives and various digital media by acquiring forensically valid images of the digital media. Investigators also learn how to preview digital media prior to acquisition to determine if the media contains key text strings, unlawful graphics, etc. In addition to imaging static devices, students also learn Incident Response techniques, conducting RAM Capture and Live acquisitions of running computers.

The DFI-2 program is an intense program which requires substantial computer aptitude. Successful completion of a graded practical exercise is required for graduation.

At the conclusion of the training program, the participants will be able to successfully seize and acquire digital evidence. These skills will be demonstrated through the completion of an eight-hour practical exercise. The practical exercise includes a simulated search warrant scenario. [Note: The search warrant scenario does not include tactics (e.g., dynamic building entry, handcuffing suspects, use of firearms, etc.). The practical exercise requires each student to work independently to acquire various types of digital evidence in a forensically sound manner.

Novice skill level students who need training in any of the prerequisites are referred to any of several sources including: Internet online training courses, adult training courses typically offered in local colleges and universities or other sources, commercial training providers that offer courses in fundamental computer usage.


Applicant must be a law enforcement officer/agent, Direct Law Enforcement Support Personnel (DLESP) or employees of a federal, state, local, tribal or international agency who perform functions directly related to a law enforcement or Department of Homeland Security (DHS) mission. This category of personnel may also include military personnel preparing for deployment. A functional knowledge of computers is highly recommended.

Required Training Materials


Program Syllabus/Curriculum

  • Cell Phone Investigations.
  • How Cell Phones Work.
  • Cell Phone Technology.
  • Mapping Software.
  • Cellular Forensics Software.
  • External Media collection/imaging/reporting.
  • Electronic Law and Evidence.
  • Incident Response for Digital Evidence.
  • Data Acquisition.
  • Disk Acquisition: Final Practical Exercise.

Program Contact Info

Glynco: (912) 267-3447
State and Local: (912) 261-4566

Program Registration