By the end of this session delegates will be able to:

• Discuss the contents of the COE Electronic Evidence Guide.
• Discuss various types of electronic evidence.
• Explain the principles of best practice relating to the Seizure and handling of electronic evidence.
• Identify the challenges offered by “dead box”, “live data” and Internet sources of electronic evidence, including evidence in the “cloud”.
• Discuss the admissibility of electronic evidence in judicial proceedings.
• Explain the proper planning and preparation of a search raid where digital evidence may be found.
• Explain how a crime scene would be secured and documented, where digital evidence occur. 

By the end of the lesson the students will be able to:

• Explain the relevance of confiscation of crime proceeds and relation to cybercrime and other types of online crime investigation.
• Define what is a financial investigation.
• Enumerate relevant international legal instruments.
• Define relevant terms Understand the four elements of a financial investigation.
• Describe different confiscation regimes.
• Explain the relation to money laundering.
• Understand the role of the FIU (Financial intelligence Unit) in money laundering investigations.

By the end of this session delegates will be able to:

• Explain the relevance of international cooperation in targeting online crime proceeds.
• Explain the advantages of combining international cooperation avenues in the field of cybercrime and e-evidence as well as financial investigations and money laundering.
• Distinguish international cooperation on exchange of information and on mutual legal assistance.
• Enumerate relevant international networks and organisations for exchange of information.
• Describe the nature and purpose of mutual legal assistance (MLA). Present relevant international legal instruments.
• Identify relevant provisions of the Budapest and Warsaw conventions in order to be able to use them appropriately.

At the end of this session participants will be able to:

• Recognise that cooperation with the private sector is essential for the purposes of combatting cybercrime.
• Identify the levels of cooperation with domestic industry (compulsory and voluntary cooperation).
• Identify the various tools in domestic legislation that enable mandatory cooperation between law enforcement agencies and domestic industry.
• Recognise the challenges that cloud data poses with respect to conducting cybercrime investigations.