Course price increases (effective April 2026)

We wanted to provide advance notice that our prices will be subject to an annual increase from 1st April onwards.

If you want to take advantage of our current pricing, please confirm any bookings (which can be for courses running after 1st April) before 31st March 2026.  Any booking forms received after this date will be subject to the price increases below:

Course Private Sector rate (ex VAT) Discounted rate for
Law Enforcement organisations (ex VAT)
Foundation in Mobile Phone Forensics £3,505 £2,970
Foundation in Securing Computer Evidence £3,505 £2,970
Acquiring Challenging & Encrypted Devices £3,505 £2,970
Smartphone App Forensics £3,505 £2,970
Python Scripting 1 £2,340 £1,980
Reviewing Mobile Forensic Data £2,730 £2,085
Mobile Device Repair £6,980 £5,915
Intermediate Mobile Device Repair £6,980 £5,915
Rework for Mobile Device Repair £6,980 £5,915
20 credit Training Pass (Law Enforcement only) N/A £13,000

For current prices, please visit the relevant course page on www.controlf.net and don’t hesitate to get in touch if you have any questions.

New training helps delegates access Bitlocker-protected data

laptop displaying Bitlocker recovery screen and prompting the user to enter the recovery key

Earlier this year we “pressed pause” on delivering our Acquiring Challenging Computer Devices (ACCD) training course so that we could enhance its relevance and impact for our customers.

We are delighted to announce the launch of our new course, Acquiring Challenging & Encrypted Devices (ACED), which will run at our training facilities here at Wyboston Lakes on the following dates:

  • 3 – 7 November 2025
  • 2 – 6 March 2026

Additional dates for 2026 will be announced in Autumn 2025.

Here’s why we believe this course will deliver real impact for Digital Forensic Units:

  • Delegates will gain hands-on experience with laptops and PCs where storage cannot be removed and where mechanisms like Secure Boot present additional challenges. This includes Windows laptops, Surface devices, Macs and Chromebooks.
  • We will teach delegates how to recover Volume Master Keys from BitLocker-encrypted exhibits, enabling access to user data.
  • Delegates will gain practical experience in capturing hashes of Windows account passwords and cracking them to achieve live access to the accounts.
  • As you would expect, we’ll be guiding students in imaging devices to external storage. Additionally, we will teach best practices for screen recording live examinations when imaging is not technically feasible. So, students leave the course with experience in “Plan B” and “Plan C” techniques for situations when Plan A either isn’t possible, or the device in question just doesn’t want to play ball!

For more information about the course, including pricing and prerequisites, please visit the course page.

Our classroom space got an uplift

Back in September we unveiled a brand new second classroom at our HQ here at Wyboston Lakes on the Cambridgeshire/Bedfordshire border. The classroom provides a light and bright environment with ergonomic seating, dual monitors and two huge LCD screens.

It’s a really nice space to teach in, and our delegates are telling us that they’re enjoying it too.

Recovering and interpreting emoji in evidential casework

The excellent Netflix show Adolescence has not only raised interesting questions about parenting responsibilities in relation to technology and misogyny in teenage boys, it also touches upon a really interesting area of digital forensics.Still frame from Netflix TV show Adolescence, showing a police interview of a teenage boy. The boy is being shown some printouts of Instagram messages

Without providing any plot spoilers, the topic of how specific emoji are interpreted crops up and the investigation team get a quick lesson in how something as subtle the colour of an emoji can convey a specific meaning. That meaning can easily be overlooked if:
– the emoji aren’t captured and presented accurately in reports
– the reviewer of said reports doesn’t recognise the significance of a particular emoji, its colour etc.

We’re undertaking a short online survey to collate feedback on current processes relating to emoji capture, reporting and interpretation. We will then share back with the digital forensics community.

If it’s an area you’re interested or have experience in, we hope you’ll take time to complete the short survey (or share it with colleagues who may have relevant experience).

Changes to our ACCD course

Acquiring Challenging Computer Devices (ACCD) is currently a 2-day course covering Microsoft Surface Pro, Apple Mac and Chromebook devices. It’s very much a practical course which looks to equip students with the vital hands-on experience of acquiring devices which behave in somewhat “non-standard” ways or which are seen less often.

We are currently working on some exciting R&D which we hope will expand the course. It’s exciting because it has the potential to increase the number of encrypted devices that our delegates will be able to acquire.

We are therefore “pressing pause” on our scheduling of ACCD at the present time. We look forward to welcoming the course back to our schedule under a new name later this year.

Please get in touch if you’d like us to keep you updated.

Retiring our ASTA course

Control-F ran its first Advanced Smartphone & Tablet Acquisition course in February 2015. The Samsung Galaxy S5 was a handset of choice and David Cameron was UK prime minister. We’ve run 43 ASTA courses over the intervening 10 years during which time we’ve helped provide students with acquisition techniques and tricks to allow them to maximise the evidence they could recover from Android and iOS exhibits. Together we’ve cracked passwords, decrypted device backups and used AI models to identify keywords within voice notes and videos.

Although the title of the course has stayed the same, the content has changed many times over (as you would hope and expect!) Devices, exercises and lessons have been retired and replaced over the years in an effort to keep pace with the continual changes in mobile devices and forensic tool capabilities.

However, the time has now come to retire the ASTA course.  The continuously evolving mobile forensic landscape not only presents challenges but also provides opportunities, and we feel the time is right to adjust our focus and take a new approach.  Rest assured we are already working on a brand new smartphone forensics course which we look forward to announcing to our customers later this year.

Our last ASTA course will run w/c 28 April, so reach out if you wish to secure one of the last remaining seats.

Course price increases (effective April 2025)

Our course prices will be increasing with effect for bookings made from the 1 April 2025 onwards. We never like increasing our prices, but it won’t have escaped your attention that the cost of most things has increased dramatically over the last couple of years. As a business, we have seen our costs increase by over 30% in the last three years.

Our course schedule page has been updated to show two prices for each course:

  1. The price if you were to book before 1 April 2025
  2. The price if you were to book from 1 April 2025 onwards

To be clear, it doesn’t matter when the course runs, the price will depend upon when the booking is made.

There are three changes for customers who choose to purchase training via a Training Pass:

  1. The cost of a Training Pass “credit” increases to £620 (+ VAT) for Training Passes purchased from 1 April 2025 onwards
  2. The minimum number of credits which can be purchased increases from 15 to 20
  3. The validity of Training Passes reduces from 2 years to 12 months

Don’t hesitate to get in touch if you have any questions.

Are you our next Technical Trainer (Course Manager)?

Control-F is now looking for a Technical Trainer (Course Manager) to join our Wyboston-based team. This role takes responsibility for creating, delivering and maintaining training course content, ensuring that our materials and delivery remain current, engaging, and accurate.

 

Key to the role is previous hands-on experience as a digital forensics practitioner. Ideally, we’d love you to have experience in classroom teaching, but we can teach you that bit as long as you are a confident and clear communicator. Please note this is a Wyboston-based role and we’re willing to provide relocation support for the right candidate.

 

Find out more about the role here.

IT Technician

Salary range £20,000 to £24,000 (depending on experience)

Are you the unofficial tech support for friends and family? The one people call on to set up their new laptop or to work out why they can’t connect to the internet? Constantly being asked for your opinion on the merits of iPhone over Android?

In other words, are you interested in tech and wishing you could find a job where you can indulge your passion and become an integral part of the team?

Then read on. We have the IT Technician job for you!

About you

  • A-level or equivalent in IT-related subject?
  • Clear and confident communicator?
  • Able to manage multiple ongoing work activities and meet deadlines?
  • Take pride in your work and work environment?

About the role

This full-time Monday to Friday role supports the internal and classroom IT of our busy digital forensics training company. This is an office-based role at our Wyboston Lakes headquarters on the Cambridgeshire/Bedfordshire border with a requirement for occasional travel to a company location in Leeds.

Reporting to the Digital Learning Manager, you’ll be taking responsibility for overseeing the classroom and office IT infrastructure, encompassing the following (this is not an exhaustive list and other responsibilities may be added as you grow into your role):

  • Supporting users of our online digital learning portal
  • Preparation and commissioning of new IT hardware and associated software
  • Managing updates to the PC “build” for the training classroom
  • Restoring classroom PCs after a training course has run and loading necessary files for the next course
  • Assisting the Digital Learning Manager in the deployment and maintenance of virtual labs and virtual classroom environments
  • Overseeing and testing IT backup systems
  • Testing training devices (mobile phones, tablets etc.) with new versions of PC software tools to identify any potential issues or  incompatibilities
  • Preparing USB drives and related devices for use during training courses
  • Working with our IT service providers to support our internal IT requirements
  • Assisting in the administration and support of our Learning Management System – this can be taught
  • Licence management including updating licence keys
  • Maintaining the Company’s asset management system
  • Working with colleagues on R&D testing – creating scenario content, testing apps etc

This is a perfect role for you if you’re setting out in your IT career, you’re interested in tech and you have (or can develop!) an interest in digital forensics. It’s one of those roles where you can learn a lot and you’ll be surrounded by colleagues who want to support you and help you to develop.

About us
The Company offers digital forensics training to mobile phone and computer examiners, mainly in UK police forces but also to private companies and overseas law enforcement organisations. We’re getting really busy with more demand than ever for our courses and you know what that means – lots of IT support needed!

Benefits

  • Competitive salary
  • Performance-based annual salary review
  • Defined contribution pension scheme
  • 22 days annual leave + 8 public holidays, increasing by 1 day per year of service (up to max. of 25 days annual leave + 8 public holidays)
  • Flexitime
  • Health cash plan
  • Paid time off for volunteering

Interested?

Get in touch with your CV – we’re waiting to hear from you! Please note that we are planning to recruit during September and October with the expectation of a November start date.

New training for investigators

For too long, investigators have been the neglected link in a chain which stretches from device seizure all the way to the courtroom. Investigators are passed huge volumes of data to review in multiple tools and expected to understand and locate data which could be critical to the investigation; all without the benefit of structured training.

Until now.

Control-F is launching two courses in the 4th quarter of 2023 to support investigators, analysts and anyone who needs to work with data extracted from mobile devices:

  1. Understanding Mobile Forensic Data (UMFD) is an on-demand (self-paced) online course designed to teach delegates how data is recovered from mobile devices, the origins and reliability of such data and its relevance within an investigation.
  2. Reviewing Mobile Forensic Data (RMFD) is a two-day classroom course designed to teach delegates how to navigate mobile forensic data in Cellebrite Reader, MSAB XAMN and Axiom Portable Cases.

 

Get in touch to find out more and to check availability.