THE FORENSIC TOOL WAS RIGHT. THE INVESTIGATOR WAS WRONG.

You can find every artifact and still reach the wrong conclusion.

Four hours to learn how to think through evidence, challenge assumptions, and make defensible investigative decisions. Then put those skills to the test.

December 15, 2026 | Live Online | $297

REGISTER NOW — $297
DFIR INVESTIGATIVE MINDSET

YOUR FORENSIC TOOLS AREN'T THE WEAK LINK.

YOU MIGHT BE.

 

Your tools can recover deleted files, reconstruct timelines, and identify artifacts.

But can they tell you whether your conclusion is wrong?

You can have accurate evidence and still make a bad investigative decision.

Ask yourself:

  • Did you overlook something important?

  • Did you assume something was true without testing it?

  • Did you confuse access to a device with proof of who used it?

  • Did you settle on an explanation before considering another?

Your tools won't catch every mistake in your reasoning.

That's your responsibility.

In this course, I'll teach you how to recognize flawed reasoning, challenge your assumptions, test competing explanations, and evaluate what the evidence actually supports.

Then you'll put what you've learned to the test.

THE EVIDENCE POINTS TO ONE PERSON. OR DOES IT?

  • A compelling timeline. A familiar username. Files found exactly where you expected.
  • Everything appears to fit.
  • But what if you're looking at the evidence through an assumption you never tested?
  • In this course, you'll confront investigative scenarios where the evidence looks convincing, but important questions remain unanswered.
  • You'll examine the information, decide what it supports, choose your next investigative step, and defend your reasoning.
  • Then you'll confront additional information that may challenge your conclusion.
  • You won't just learn about investigative judgment. You'll have to use it.

TAUGHT BY AN INVESTIGATOR. FOR INVESTIGATORS.

Former police detective, task force officer, SWAT cop, and undercover operator. Court-qualified digital forensic expert. Author of the Placing the Suspect Behind the Keyboard series.

I've investigated cases where the evidence was incomplete, witnesses were wrong, assumptions were dangerous, and a wrong decision could have deadly consequences.

I've also seen how easy it is to become so focused on finding evidence that you stop questioning what it actually proves.

That's why I teach investigative mindset.

In this course, I won't teach you which buttons to click. I'll challenge how you evaluate evidence, question assumptions, make decisions, and defend your conclusions.

Because your tools can't take responsibility for your investigation. You have to. 

REGISTER NOW — $297

FOUR HOURS. REAL INVESTIGATIVE CHALLENGES. $297.

Tuesday, December 15, 2026

11:00 AM–3:00 PM Mountain Time (Boise)

Live Online | Instructor-Led

Your registration includes:

  • Four hours of live, instructor-led training.

  • Interactive investigative exercises and case challenges.

  • 30-day replay access.

  • Digital copy of DFIR Investigative Mindset.

  • Certificate documenting four instructional hours upon successful completion.

REGISTER NOW — $297

What's Included In The Course...

SEEING WHAT OTHERS MISS

What you overlook can change an investigation.

Sharpen your observation skills, recognize missing information, identify assumptions, and challenge what you believe you're seeing.

THINKING BEYOND THE OBVIOUS

The first explanation isn't always the right one.

Question assumptions, consider competing explanations, connect information, and ask investigative questions that change where you look next.

MAKING THE CALL

The evidence is incomplete. Someone wants an answer.

Evaluate leads, make decisions under uncertainty, respond when new information changes your theory, and determine when to continue, redirect, or stop.

OWNING THE OUTCOME

Your tools don't take responsibility. You do.

Recognize unsupported conclusions, explain your reasoning, acknowledge uncertainty, and defend your investigative decisions when challenged.

THE EVIDENCE WON'T MAKE THE DECISION. YOU WILL.

Your tools can find the evidence.

Your investigative judgment determines what you do with it.

Four hours. Real investigative challenges. Decisions you'll have to defend.

Tuesday, December 15, 2026 | Live Online | $297

PUT YOUR INVESTIGATIVE MINDSET TO THE TEST — $297