Law Enforcement Training

Cybercrime is now the fastest-growing category of criminal activity, yet most law enforcement agencies lack the specialized training needed to investigate digital offenses, preserve electronic evidence, and present technical findings in court. Mjolnir Security bridges this gap with hands-on training programs delivered by practitioners who handle real incident response and forensic cases — not retired academics lecturing from slides.

Our instructors bring direct experience from 580+ DFIR engagements, working alongside law enforcement on ransomware investigations, business email compromise cases, child exploitation material seizures, and nation-state intrusions. This operational experience translates into training that is practical, current, and immediately applicable to active investigations.

Digital Forensics Training

Our forensics curriculum covers the complete investigation lifecycle — from initial acquisition through analysis, reporting, and courtroom testimony. Students work with real forensic tools and real evidence (sanitized case data) in lab environments that replicate the challenges they face in the field.

• Disk forensics — imaging, file system analysis, artifact recovery, and timeline reconstruction
• Memory forensics — volatile data capture, process analysis, and malware detection in RAM
• Mobile device forensics — iOS and Android acquisition, app data extraction, and cloud artifact recovery
• Network forensics — PCAP analysis, lateral movement detection, and exfiltration identification
• Cloud forensics — M365, Google Workspace, and AWS/Azure/GCP log analysis

Evidence Handling & Chain of Custody

Evidence that is improperly collected, stored, or documented is evidence that gets excluded. Our training emphasizes the legal and procedural requirements that ensure digital evidence remains admissible in Canadian and international courts.

• Proper seizure and imaging procedures that preserve original evidence integrity
• Chain-of-custody documentation standards and best practices
• Hash verification and tamper-detection protocols
• Courtroom presentation of digital evidence and expert testimony preparation
• Working with Mjolnir's TYR Digital Evidence Platform for evidence management

Cybercrime Investigation

Beyond forensics, officers need to understand how cyber attacks work, how threat actors operate, and how to trace criminal activity across digital infrastructure. Our investigation training builds these skills through scenario-based exercises modeled on real cases.

• Ransomware investigation — tracing cryptocurrency payments, identifying infrastructure, and coordinating with federal agencies
• Business email compromise — email header analysis, IP tracing, and financial recovery procedures
• Dark web investigations — OSINT techniques, marketplace monitoring, and attribution methods
• Social media and open-source intelligence gathering for criminal investigations
• Coordination with DFIR teams during active incidents (working with Digital Forensics teams)

Custom Curriculum Development

Every agency has unique jurisdiction, mandate, and capability gaps. We develop custom training programs tailored to your team's experience level, the types of crimes you investigate, and the tools and platforms you use. From introductory awareness for patrol officers to advanced forensic certification prep for digital crime units, we scale the curriculum to fit.