Virtual Detective Course

Lesson 1 • Legal and Ethical Boundaries

Covers the ethical obligations and legal constraints governing virtual investigations. Students learn to operate within authorised boundaries before touching any investigative tool.

Lesson 2 • Overview of the Investigation Lifecycle

Maps the end-to-end process from initial tip to final report. Provides the structural scaffold that all later chapters fill with specific skills and techniques.

Lesson 3 • Core Terminology and Concepts

Introduces essential vocabulary covering digital artifacts, evidence types, and investigative roles. Shared language enables precise communication throughout all course modules.

Lesson 1 • Evaluating and Verifying Sources

Provides structured methods for assessing credibility and corroborating claims. Accurate source evaluation prevents false leads from corrupting the investigation.

Lesson 2 • Introduction to OSINT Principles

Defines open-source intelligence and distinguishes it from other collection disciplines. Grounds students in the reliability hierarchy before they begin active collection.

Lesson 3 • Organising OSINT Findings

Introduces tools and workflows for storing, tagging, and retrieving collected criminal intelligence. Organised data accelerates analysis and supports defensible reporting.

Lesson 4 • Search Engine Mastery

Teaches advanced query construction to surface hidden or buried web content. Students apply operators and filters to dramatically narrow and deepen search results.

Lesson 1 • Building a Subject Profile

Synthesises all identity indicators into a structured, evidence-backed subject profile. Profiling skills feed directly into network mapping and behavioural analysis chapters.

Lesson 2 • Email Address Investigation

Explores methods for extracting intelligence from email addresses, including account age and linked services. Email pivots frequently unlock entire identity clusters.

Lesson 3 • Username and Handle Tracing

Covers techniques for tracking a single username across multiple platforms and services. Consistent handle use is one of the most reliable identity anchors available to investigators.

Lesson 4 • Phone Number and Device Indicators

Covers open-source methods for attributing phone numbers to individuals and devices. Students learn to distinguish carrier data from user-generated signals.

Lesson 1 • Mapping Social Networks

Applies link analysis to social media connections, followers, and interaction patterns. Social graphs reveal associates, influencers, and potential co-conspirators.

Lesson 2 • Principles of Link Analysis

Introduces graph theory concepts applied to investigative network mapping. Understanding nodes and edges is prerequisite to building meaningful relationship charts.

Lesson 3 • Visualising and Presenting Networks

Teaches use of visualisation tools to render complex networks into clear, communicable charts. Effective visuals are essential for briefings and final investigative reports.

Lesson 4 • Identifying Key Nodes and Vulnerabilities

Applies centrality analysis to pinpoint the most influential actors and critical links in a network. Key node identification drives investigative prioritisation and resource allocation.

Lesson 1 • Evidence Integrity Fundamentals

Establishes the principles of evidence integrity, including hashing and write protection. Integrity practices underpin every collection action taken in this chapter.

Lesson 2 • Working with Third-Party Data Sources

Explains how to request and handle data from platforms, registrars, and service providers. Proper request procedures maximise data yield and maintain legal defensibility.

Lesson 3 • Preserving Communications Data

Addresses collection of emails, messages, and chat logs while maintaining metadata integrity. Communications data often contains the most direct evidence of intent and coordination.

Lesson 4 • Evidence Storage and Access Control

Covers secure storage architectures and access logging for collected evidence. Controlled access prevents contamination and supports chain of custody requirements.

Lesson 1 • Behavioural Indicators in Digital Data

Introduces the concept of behavioural signatures embedded in digital activity logs and content. Recognising these signatures is the foundation of all pattern-based analysis.

Lesson 2 • Predictive Behavioural Modelling

Introduces structured methods for forecasting subject behaviour based on established patterns. Predictive models support proactive investigative decisions and resource planning.

Lesson 3 • Linguistic and Stylometric Analysis

Covers analysis of writing style to attribute authorship and detect deception in text. Stylometric techniques complement technical evidence with content-based insights.

Lesson 4 • Detecting Deception and Manipulation

Identifies digital behaviours associated with deliberate deception, impersonation, and narrative manipulation. Students apply detection frameworks to case scenarios.

Lesson 1 • Covert Online Persona Management

Teaches creation and maintenance of investigative personas for undercover digital operations. Persona integrity is critical to both operational success and legal defensibility.

Lesson 2 • Geolocation and Imagery Analysis

Covers techniques for determining physical locations from images, videos, and metadata. Geolocation skills bridge the digital and physical dimensions of an investigation.

Lesson 3 • Multi-Source Intelligence Fusion

Integrates OSINT, behavioural, financial, and technical data streams into a single coherent picture. Fusion analysis is the hallmark of advanced investigative competence.

Lesson 4 • Cryptocurrency and Financial Tracing

Covers blockchain analysis techniques for tracing digital asset flows between wallets and exchanges. Financial tracing exposes funding networks and monetisation schemes.

Lesson 1 • Case Intake and Scoping

Covers structured intake procedures for defining objectives, constraints, and success criteria. Clear scoping prevents scope creep and aligns investigative effort with client needs.

Lesson 2 • Analytical Writing for Investigators

Develops concise, evidence-backed writing skills tailored to investigative audiences. Strong analytical writing transforms raw findings into actionable criminal intelligence products.

Lesson 3 • Structuring the Investigative Report

Provides a professional report template covering executive summary, findings, and appendices. A well-structured report maximises impact and supports downstream decision-making.

Lesson 4 • Briefing Stakeholders and Handoff

Covers verbal briefing techniques and formal handoff procedures for completed investigations. Effective briefings ensure findings are understood and acted upon by decision-makers.