Training pathways for digital investigators in 2026

Three or four years ago, a 'digital investigator' was usually one specialism deep. In 2026, the boundaries between forensics, OSINT, crypto and analytics are dissolving — and so are our training pathways.

Foundational (0-12 months)

• DataExpert First Responder — handling, seizure, triage, chain of custody.
• Chainalysis Reactor Fundamentals or TRM Forensics Foundations.
• OSINT Methodology — collection planning, exhibit hygiene, sock-puppet operations.
• i2 Analyst's Notebook Essentials.

Intermediate (1–3 years)

• Mobile Forensics: advanced extractions, decrypted backups, third-party app artefacts.
• Reactor Investigations Specialist or TRM Tactical Investigator.
• i2 TextChart and large-dataset workflows.
• Cyber Incident Response: the analyst's track.

Advanced and specialist

• Decryption and password recovery clinics.
• Crypto Asset Recovery in Civil Proceedings — with our partner law firms.
• OSINT for human intelligence collection.
• Programmatic analytics: Python and Cypher for investigators.