First Responder Officer can be a PCR Van officer or the Emergency Officer of the Jurisdictional Police Station. He is often the first to arrive on the scene of crime and needs to have an awareness of how technology affects crime, what is digital evidence and how it should be handled.


An incident responder is often the first police personnel to arrive at the scene of crime. An incident responder, therefore, must be aware of how technology affects crime, what is digital evidence and how it should be handled.

The basic level course for Incident Responder's track shall help the Law Enforcement Agencies gain an understanding of following subjects:

  1. Understand different types of cyber-crimes and its evolution over the years.
  2. Understand various technologies like Computers, Mobiles and Computer Network along with their hardware and software components.
  3. Understanding what digital evidence is and what can be found by analyzing digital Evidence.
  4. Incident Response Procedures- identifying, gathering, preserving digital evidence with proper chain of custody.
  5. Digital Crime Scene Management including search and seizure of evidence.
  6. Implications of data/evidence tampering and method to prevent and avoid data tampering and preserve authenticity of evidence.
  7. Standard Operating Procedure and major precautions which are required to taken before acquisition of digital evidence.
  8. Knowledge of current legislation and policies related to crimes using technology including the legal authority to obtain telecommunications information such as subscriber data.

The technology fundamentals and crime scene management isexplained through case scenarios and demonstration/simulation of tools along with Standard Operating Procedures (SOP)

Estimated Effort: 40


Module 1: Handling Cybercrime Complainants

Knowledge of Information Technology

Knowledge of Current Legislation & Policies Related To Crime Using Technology

Module 2: Digital Crime Scene Management

Digital Evidence & What can be Found by Analysing Digital Evidence?

Knowledge of Consequences to Alteration of Dates and Time and Others that may Influence the Criminal Justice Process

Module 3: Search and Seizure of Digital Evidences

Crime Scene Attendance: Identifying, Gathering, Preserving Digital Evidence with Proper Chain of Custody

Risks Associated with Technology for Individuals, Organization & Investigation Officers including Reliability of Information

Seizure of Suspected Computer

Disk Imaging, File Deletion and Media Sanitization

Identification of digital evidence

Reference book

pdf file for emeeded

Estimated Effort: 40

Course Syllabus

Cyber Crime Investigation Hands-On Approach

Cyber Crime Investigation Hands-On Approach (handbook for Police Officer)


Estimated Effort: 50