A transformative, certified program designed to take digital forensic professionals from basic experience to confident Python proficiency. Updated for 2025, this hands-on training teaches you to build your own scripts to extract, parse, and analyze hidden evidence from app data — empowering you to go beyond standard tools and apply Python skills directly in real-world forensic scenarios.
This focused, 3-day course is designed for forensic professionals who want to go beyond standard tools and automate the extraction and analysis of mobile app data. You'll learn to write powerful Python scripts to parse SQLite databases, custom file formats, and artifacts from unsupported apps — giving you more control and deeper insight into your investigations.
Through hands-on, code-focused labs, you’ll build real scripts step by step, learning to handle raw data confidently and create repeatable workflows to save time and improve accuracy. By the end, you’ll have practical Python skills to extract and process data when commercial tools fall short.
sqlite3
, plistlib
, and json
to analyze real forensic datasetsThis course is ideal for forensic examiners, analysts, or technical investigators who:
This course is designed for forensic professionals and technical investigators who want to confidently leverage Python to analyze mobile app data. It's perfect if you're ready to move beyond GUI-based tools and build scripts and methods tailored to real forensic needs.
This course is especially valuable if you:
While the course uses Python, it starts from fundamental concepts and builds up — no prior scripting expertise is needed to follow and succeed.
This Python course is designed for forensic professionals who want to move beyond tool limitations and create truly custom, automated workflows. You’ll work hands-on with real datasets and build practical scripts you can immediately apply in your own cases.
Every part of the course — including the OnDemand version — is immersive and practical. You’ll gain immediately usable skills to speed up your analysis and reduce manual effort in future cases.
The Python for Forensics course is led by James Eichbaum — a trusted instructor known for transforming complex forensic topics into clear, hands-on learning experiences. With over 15 years in the field, James has trained global law enforcement, government agencies, and private sector experts across more than 30 countries.
James combines deep technical expertise with a strong background in live investigations, making him uniquely qualified to teach practical Python skills focused on real-world forensic challenges. His teaching style is highly interactive, encouraging students to build scripts step by step, validate data, and solve actual case-based problems.
In this course, James shows you how to use Python to analyze exported data, automate repetitive tasks, and create custom tools — all without requiring advanced coding experience. You'll leave with practical scripts and approaches you can immediately adapt to your current cases.
Conecta con James en LinkedInJoin a live, instructor-led session online — interactive and focused on real-world forensic applications of Python.
Bring the training to your team on-site — fully immersive, instructor-led, and customized to your needs.
This advanced training is designed for forensic professionals who want to automate, accelerate, and enhance their mobile and database investigations using Python. Over three intensive days, you'll build hands-on skills to parse complex artifacts, create targeted scripts, and support in-depth analysis beyond standard tools.
Through guided labs and realistic datasets, you'll learn to develop custom Python scripts to extract, decode, and interpret evidence directly from app data, file systems, and databases. This practical focus ensures you can immediately apply your new skills to your casework.
Whether you're validating tool output, analyzing proprietary app data, or building repeatable forensic workflows — this course equips you with practical, flexible methods to handle modern challenges confidently.
El curso completo incluye:
The live course is delivered over 3 consecutive days, with instructor-led sessions, hands-on labs, and interactive case-driven exercises.
Yes. The curriculum is fully updated with the latest Python techniques, libraries, and real-world forensic challenges drawn from modern mobile and app investigations.
Absolutely. We offer group pricing and custom delivery for teams (5+ participants). Sessions can be tailored to specific workflows and evidence types your team handles.
No, you don’t need to be a developer. The course starts from the basics and builds up gradually. All scripts and workflows are explained step by step, focusing on forensic use cases rather than pure programming theory.
Labs include creating targeted scripts to parse SQLite, JSON, and plist data; automating artifact extraction; and working with real app datasets to build repeatable forensic workflows.
The course is led by James Eichbaum, an experienced instructor with extensive expertise in mobile forensics, scripting, and investigative workflows. James has trained agencies and DFIR professionals globally for over 15 years.
Yes. While this course focuses on standalone scripting, the skills you learn can help validate tool output, automate repetitive tasks, or supplement your analysis beyond what standard tools offer. No direct APIs are included or required.
Yes. You receive a verifiable certificate with unique ID and instructor signature. It qualifies for 24 créditos CPE and can be used for internal or legal documentation.
Yes. You’ll have access to instructor email support and curated resources to help reinforce your learning and assist with implementing what you've learned into your daily casework.
The course is designed to scale for both beginners and experienced practitioners. Beginners are guided step by step, while advanced attendees benefit from deep dives into data structures and automation strategies.
¡Muy buen curso! ¡Increíblemente buen profesor y creo que el aprendizaje a distancia funciona al menos tan bien como en el aula! ¡Gracias de nuevo James! Gran equilibrio entre profundidad técnica y laboratorios prácticos. Me gustó que no nos basáramos únicamente en herramientas, sino que miráramos bajo el capó y diéramos sentido a los datos. Sin duda me ha ayudado a redactar informes más claros y a explicar los resultados a los investigadores.
El mejor curso que he hecho nunca. Realmente disfruté de la semana, aprendí un montón, y todo fue claro y fácil de seguir. Los laboratorios parecían reales y tenían sentido, incluso sin tener mucha experiencia. El instructor explicó las cosas con mucha claridad e hizo que todo pareciera manejable. Se lo recomendaría absolutamente a cualquiera que trabaje en informática forense móvil.
No esperaba disfrutar tanto como lo hice. La forma en que el instructor desglosó las cosas, especialmente todos los datos de la aplicación, lo hizo realmente divertido. James realmente sabe lo que hace y mantuvo las cosas en movimiento sin abrumarnos. Me llevé técnicas reales que utilizaré en el trabajo. Sigue así, James.
Sea el primero en enterarse de nuevas oportunidades de formación, herramientas gratuitas, entradas de blog basadas en casos y conocimientos prácticos. Nuestro boletín mensual está pensado para ayudarte a aprender más rápido, resolver casos de forma más inteligente y mantenerte al día en un sector que nunca se detiene.
Introduce tu correo electrónico para inscribirte.
Aprenda de la forma que más le convenga y adquiera conocimientos prácticos que podrá utilizar de inmediato.
Aprenda de la experiencia. Nuestros instructores aportan décadas de experiencia práctica tanto en investigación como en formación, y siguen trabajando en casos activos. Obtenga la orientación de expertos que mantendrá sus habilidades afiladas y sus conocimientos actualizados, en un campo que nunca se detiene.
Elija microlecciones breves y específicas cuando no disponga de mucho tiempo. Vaya a su propio ritmo con los cursos a la carta. Únase a una clase en línea en directo o lleve el aula a su equipo. Aprenda de la forma que más le convenga, sin afectar a su trabajo ni a sus investigaciones.
Independientemente del formato, cada curso le proporciona herramientas y técnicas que puede utilizar de inmediato. Trabaja con laboratorios interactivos, desafíos CTF y ejercicios basados en datos de casos reales, fundamentados en la realidad de las investigaciones digitales.
Hemos visto que nos visitas desde Suecia. Hemos actualizado nuestros precios en Corona sueca para que comprar resulte más sencillo. Utiliza Dólar de los Estados Unidos (US) en su lugar. Descartar
¡Gracias por un gran curso! Por fin sé cómo trabajar con aplicaciones no compatibles. Este curso me ha ayudado mucho. He hecho algunos cursos de formación antes, pero este se destacó porque era realmente útil de inmediato. El instructor explicó cómo se almacenan los datos de la aplicación de una manera que tenía sentido, y realmente aprecié todos los ejemplos reales. Ya he utilizado algunas técnicas en un caso actual.