A full single-day delivery from introduction through the tabletop exercise debrief. The schedule can be amended to meet your needs and be delivered across multiple days.
The course unfolds in two stages: four classroom modules that build foundational knowledge, followed by a hands-on tabletop exercise (TTX) with a pre-brief, live scenario, and debrief. Times below reflect the standard single-day format.
Every classroom module runs one hour — 45 minutes of instruction followed by 15 minutes of questions and answers.
Open discussion and Q&A.
Open discussion and Q&A.
Open discussion and Q&A.
Open discussion and Q&A.
The TTX is team-based and places participants in a real-time investigative environment. Logistics are lightweight — all investigative tools used do not require any downloads.
Participants need access to a computer terminal with an internet connection.
A live internet connection is required at each terminal for the investigative scenario.
For organizations that want the dark web included in the hands-on exercise, the Tor or Brave browser must be installed on the terminal(s).
All investigative tools used during the exercise run without any additional software downloads.
A maximum of five participants is allotted per computer terminal. For example, a class of 30 participants requires a total of six terminals with internet access available.
Timing and format can be adapted for your team — single day or across multiple days. Let’s find the right fit.
Request Information →