Welcome to the National Cybercrime Training Centre (CyTrain). Aim of the project is capacity building focused on combating cybercrimes, impact containment and investigations.
Objectives of CyTrain are Focusing on standardization of course curriculum,
Online personalised,interactive or virtual education, enabling dissemination of information and provide knowledge as tool for capacity building and optimizing resources.
In order to stay abreast with the latest developments, it is important to forge partnerships with domestic as well as International entities like UNODC, INTERPOL, CEPOL, FBI, EC3 of Europol etc.
This training curriculum will provide law enforcement officers with two certifications i.e. I4C Certified Specialist & I4C Certified Expert. Standardized certification can be nationally accepted, recognized and which can be presented in courts.
In cyberspace, criminals keep on adopting new modus operandi every day and therefore, simulation-based training methodology has to be contemporary. Training courses are more reflective of real-world cases and incidents.
As on 11th of September 2025
Registered Users
Available Courses
Learning Materials
Certificates Issued

Testing Testing Testing Testing Testing Testing Testing Testing Testing Testing

testing Course summary testing Course summary

responder testresponder testresponder testresponder testresponder testresponder testresponder testresponder testresponder testresponder testresponder testresponder testresponder testresponder testresponder test

An incident responder is often the first police personnel to arrive at the scene of crime. An incident responder, therefore, must be aware of how technology affects crime, what is digital evidence and how it should be handled.
The basic level course for Incident Responder's track shall help the Law Enforcement Agencies gain an understanding of following subjects:
The technology fundamentals and crime scene management is explained through case scenarios and demonstration/simulation of tools along with Standard Operating Procedures (SOP)

Responders would be the first personnel to report to the scene of crime. These are the first officials to assess the complaint, the crime scene, nature of the crime, its modus operandi and the technology involved. Hence it is imperative that these officers are made aware about various cyber-crimes and their modus operandi along with handling the crime scene, and collection of both physical and digital evidence.
The objectives of this course is for Responders to gain an intermediate level knowledge of the following topics:-
The prerequisite for this course is Responder Track – Basic Level Course.

Cybercrime is constantly evolving. It is important for cybercrime incident responders to be aware of the latest development in technology being used by cyber criminals. This course is for cyber crime responders to get specific insight into new technology and trends and specific procedures and SOPs.
Objective of this course is for Incident Responders to gain knowledge ofthe followingtopics:-
The prerequisite for this course is Incident Responder Track – Intermediate Level Course.

The Digital Forensics officer must have a technical background and practical knowledge ofcomputer forensic principles for identification and collection of digital evidence.
The basic level course for Incident Responder's track shall help the Law Enforcement Agencies gain an understanding of following subjects:
The cyber-crime fundamentals and handling of digital evidence is explained through case scenarios and demonstration/simulation of tools along with Standard Operating Procedures (SOP)

The digital forensic domain involves forensic acquisition, analysis and reporting of digital artefacts from various digital devices such as computers, smart phones, feature phones, satellite phones, networking devices such as routers & switches, digital cameras, CCTV systems, GPS and other related devices. Digital devices can be volatile in nature and hence it is vital that the experts should know the different methods to collect volatile data. Due to different operating systems used by OEMs and manufacturer’s it is important to cover leading operating system based forensic techniques.
The objective of this course is for law enforcement agencies to gain an intermediate level knowledge of the following topics related to digital forensics:-
The prerequisite for this course is Digital Forensics Track – Basic Level Course.
The solution of most of the advanced cybercrime cases require careful gathering and forensic investigation of digital evidence. Procedures of digital forensics must be known to cyber police personnel in order to open up pathways for investigation and also avoid technical pitfall while handling digital evidence.
The objective of this course is to provide understanding of the following areas relevant to digital forensics:-
The prerequisite for this course is Digital Forensics Track – Intermediate Level Course.

Investigating Officeris the police officer that handles criminal cases in a wide variety of police operational units. This investigating officer handles increasingly more technology related issues regarding the cases and therefore need to understand technology fundamentals and investigation of crimes using various technologies.
The basic level course for Investigation track shall help the Law Enforcement Agencies gain an understanding of following subjects:

Investigating officers are responsible for investigating cybercrimes such as email frauds, scammers, social media related offences, offences involving audio/video footages etc. Officers in these cases are required to have sound knowledge related to the technology used by offenders to commit crimes.
The objective of this course is for Investigating Officers to gain an intermediate level knowledge of the following topics:-
The prerequisite for this course is Investigation Track – Basic Level Course.
Investigating officers are responsible for investigating cybercrime while also correlating other crimes with cyber evidence.Officers in these cases are required to have sound knowledge related to the technology used by offenders to commit crimes and procedures to investigate such crimes.
Objectives of this course is for these personnel to gain knowledge of following topics:-
The prerequisite for this course is Digital Forensics Track – Intermediate Level Course.

Cybercrime Intelligence Officers/Analystsis required to identify and produce intelligence on cybercrime from raw information; assemble and analyze multisourceoperational intelligence; prepare and present intelligence briefings, prepare planning materials for photographic reconnaissance missions; analyze the results and prepare reports.
The basic level course for Intelligence Officers shall help the Law Enforcement Agencies gain an understanding of following subjects:
The fundamentals of cyber intelligenceisexplained through case scenarios and demonstration/simulation of tools along with Standard Operating Procedures (SOP).
Cybercrime Intelligence Officers/Analysts identify and produceactionable intelligence on cybercrime from raw information. They assemble and analyseinputs from multiple sources. Strategic and operational crime analysis is typically carried out using Open-Source Intelligence (OSINT) tools and specialist databases.
Objectives of this course is for cybercrime intelligence officers / analysts is to gain an intermediate level of knowledge of followingtopics:-
The prerequisite for this course is Intelligence Track – Basic Level Course.
The importance of case intelligence gathering cannot be overemphasized in the case of handling cybercrime cases. Cybercriminals are often technically savvy but inadvertently leave many electronic traces.
The objectives of this course are to gain knowledge of following areas relevant to Intelligence gathering:
The prerequisite for this course is Intelligence Track – Intermediate Level Course.

The Management/Administration Unitis required to take informed decisions in cybercrime cases or in other complex investigations involving cybercrime elements.Their role is to coordinate staff, allocate resources and prioritize policing activities.They should possess detailed overview of the capacity, capabilities and needs of the unit and provide it with the relevant training and tools that enable or facilitate investigation and examination of the evidence.
The basic level course for Management track shall help the Administrators gain an understanding of following subjects:
The cybercrime fundamentals and cybercrime investigation are explained through case scenarios and demonstration/simulation of tools along with Standard Operating Procedures (SOP).
Staff of various cybercrime units dealdirectly with cyber investigators and experts. Their role is to plan, coordinate, direct and control activities of cybercrime units including training and procurement.They should have detailed overview of the capacity, capabilities and needs of theunit and provide it with the relevant training and tools that enable or facilitateinvestigation and examination of cybercrime evidence.
Objectives of this course is for these personnel to gain an intermediate level of knowledge of followingtopics:-
The prerequisite for this course is Management Track – Basic Level Course.
Cybercrime officers at senior level manage and coordinate cybercrime units in areas relevant to human capital management and resource management. They should have detailed knowledge of cybercrime investigation to create a facilitating environment for their subordinates to function effectively in the fight against cybercrime.
Objectives of this course is for these personnel to gain knowledge of following topics:
The prerequisite for this course is Management Track – Intermediate Level Course.

Judges/Prosecutors handle a wide variety of criminal cases. They should get anawareness of how crime can be facilitated by technology and what digital evidence is and how it can be used in a case.
The basic level course for Judiciary track shall help the Law Enforcement Agencies gain an understanding of following subjects:
The technology fundamentals and investigation of crimes using various technologies is explained through case scenarios and demonstration/simulation of tools/techniques along with Standard Operating Procedures (SOP).
Personnel associated with the Judiciary dealing with crime cases or specifically cybercrime cases need specialized technology awareness, cybercrime awareness and digital evidence skills.
The objective of this course is to provide an intermediate level understanding of the following areas:-
The prerequisite for this course is Judiciary Track – Basic Level Course.
The IT Forensic Analyst must have a background and practical knowledge of Basic principles of Computer and Cyber Forensics for the purpose of identification and collection of Digital evidences.
The basic level course track on IT shall help the Law Enforcement Agencies gain an understanding of following subjects:

Module 1: Emerging Threat Landscape of Cyber Crimes
Module 2: Introduction to Computers
Module 3: Drafting a Report & Information Gathering
Module 4: Introduction to Social Media & Banking Frauds
Module 5: Cyber Laws
Assessment & Certification

Module 1: CDR, IPDR & Tower Dump Analysis – Theory
Module 2: Hard Disk Geometry
Module 3: Introduction to File Systems
Module 4: File Extensions & File Signatures
Module 5: Introduction to Hashing and Imaging
Module 6: Metadata Analysis Theory
Module 7: Log Analysis
Module 8: Registry Forensics
Module 9: Introduction to Encryption and Decryption Technique
Module 10: Windows System Artefacts
Module 11: DNS Abuse and Criminal Usage
Module 12: Browser Forensics
Module 13: Removable Storage Media Forensics
Module 14: Introduction to Deepweb and Darkweb
Module 15: Introduction to OSINT and SOCMINT
Module 16: Network Forensics
Module 17: Introduction to Malware Analysis
Module 18: Cloud Computing and Cloud Forensics
Module 19: Introduction to Virtualization
Module 20: Introduction to Blockchain and Cryptocurrency
Module 21: Introduction to Password Cracking Concepts
Module 22: Introduction to Internet of Things
Module 23: Anti-Forensics
Assessment & Certification


|
1. Andriller Tool Use Case |
21. OSForensics Tool Use Case |
|
2. Blurity Tool Use Case |
22. Procmon Tool Use Case |
|
3. Browser history examiner Tool Use Case |
23. Process Explorer Tool Use Case |
|
4. Bulk Extractor Tool Use Case |
24. Recuva Tool Use Case |
|
5. Disk wipe Tool Use Case |
25. Redline Tool Use Case |
|
6. Exiftool Tool Use Case |
26. Rufus Tool Use Case |
|
7. File Matadata Tool Use Case |
27. Splunk Tool Use Case |
|
8. Hash Calc Tool Use Case |
28. Sys Analyzer Tool Use Case |
|
9. Hash My file Tool Use Case |
29. TCP view Tool Use Case |
|
10. Helix Tool Use Case |
30. Tor Tool Use Case |
|
11. Hex editor Neo Tool Use Case |
31. Unknown_File_Hunter Tool Use Case |
|
12. HxD Tool Use Case |
32. USB Device View Tool Use Case |
|
13. Jpeg Snoop Tool Use Case |
33. Veracrypt Tool Use Case |
|
14. Kernel for Exchange Server Tool Use Case |
34. Volatility Tool Use Case |
|
15. Log parsar Tool Use Case |
35. WFA Tool Use Case |
|
16. Magnet RAM Capture Tool Use Case |
36. Win Audit Tool Use Case |
|
17. Maltego Carbon Set Up Tool Use Case |
37. Win IP Config Tool Use Case |
|
18. Malwarebytes Tool Use Case |
38. WIRESHARK Tool Use Case |
|
19. Manage Engine Desktop Tool Use Case |
|
|
20. Network Miner Tool Use Case |
40. MD5 Summer Tool Use Case |

Access the Virtual Cyber Lab
The Teacher course for Cyber Awareness Track shall help the Teachers gain an understanding of following subjects:-
1. Cyber Crime Landscape
2. Cyber Crime Definition and Types
3. Computer, Mobile and Smart Devices Safety
4. Identity Theft
5. Psychological Tricks/ Social Engineering
6. Social Media Related Cyber Frauds
7. Online Banking Frauds
8. Classroom/ School Safety from Cyber Frauds
9. Cyber Safety for Students
10. Legal and Regulatory Guidelines
11. Introduction to Privacy and Data Protection