e-DiFTA 2027 · First edition · European Digital Forensics Training Alliance
Hands-on digital forensics training in Prague
Eight specialised courses for law enforcement, military digital forensic personnel and private-sector investigators. Five days, one venue, 22–26 February 2027.
All courses run in parallel, Monday to Friday, with 35 training hours each. Every participant who passes receives an official certificate recognising the training hours.
Learn to use AI and large language models as investigative tools – and to recognise how criminals misuse them – with hands-on work on LLMs, RAG systems, AI agents and the EU AI Act.
Hands-on intermediate course in advanced Android and iOS analysis: OS internals, encryption, manual SQLite and plist parsing, cloud artefacts and validating what your tools report.
Acquire and analyse RAM from live machines: live forensics and incident response, memory imaging, Windows artefacts from memory, password recovery and in-depth work with the Volatility framework.
Practical open-source intelligence for investigators: a secure OSINT environment, advanced search, SOCMINT, breach data, metadata, image verification, geolocation, the dark web and evidential reporting.
Expert-level Windows 11 forensics over five days: BitLocker, WSL and Sandbox, Registry and user activity, Helium apps, OneDrive, Chromium browsers and SQLite exploitation.
A 35-hour advanced course on extracting and analysing data from drones (UAS), their controllers and mobile apps – DJI, ArduPilot, PX4 and FPV – using non-destructive, court-ready workflows.
Investigate network intrusions and ransomware using host-based evidence: traffic artefacts, live triage, memory analysis, Windows event logs and Registry persistence, and attack timelines.
One week in Prague. Eight courses. Taught by examiners who work real cases.
The European Digital Forensics Training Alliance is organised by INsig2, Spyder Forensics and WINDIFE. It supports seasoned forensic examiners refining advanced techniques as well as professionals who are still building their investigative skills. Attendance is limited to law enforcement personnel, military personnel engaged in digital forensic activities and private-sector investigators.
Hands-on from day one
Labs and exercises on real artefacts and datasets, with open-source and leading commercial forensic tools.
Small, focused groups
Each course has a limited number of seats, so there is time for questions and one-to-one help.
Official certificate
Participants who pass receive an official e-DiFTA certificate recognising the training hours.
Practitioners only
Exclusively for law enforcement, military digital forensic personnel and private-sector investigators, so you learn alongside people doing the same work.
How it works
From registration to the first lab
Choose your course
Look through the eight courses and pick one per participant.
Register online
Fill in the form with your official work email and invoicing details.
Pay the invoice
Pay by bank transfer by 25 December 2026. Your seat is confirmed once payment is received: first paid, first confirmed.
Book your hotel
After confirmation you receive the booking link for the €90 participant rate.
Schedule and fee
Five full days, 22–26 February 2027
All eight courses run in parallel at NH Prague City. Lunch and two coffee breaks are included every day.
Every day, the same rhythm
Monday to Friday, 22–26 February 2027. The same timetable for all eight courses: 7 training hours a day, 35 in total.
Mon22Feb
Tue23Feb
Wed24Feb
Thu25Feb
Fri26Feb
Morning session
Coffee break
Buffet lunch
Afternoon session
Coffee break
End of the training day
Registration fee
€2,500per participant full five-day course
5 days, 35 training hours of hands-on training (08:00–17:00)
Official certificate of successful completion, recognising the training hours
All training materials, training licences and computers provided
Buffet lunch and morning and afternoon coffee breaks
Attendance is intended exclusively for law enforcement personnel, military personnel engaged in digital forensic activities and private-sector investigators. The courses suit both experienced forensic examiners and professionals who are still developing their investigative skills – check the prerequisites on each course page.
What is included in the fee?
Five days of hands-on training (35 training hours), an official certificate of successful completion recognising the training hours, a buffet lunch and morning and afternoon coffee breaks every day. All training materials, training licences and computers are provided by the organisers. Spyder Forensics courses also include a student manual and lab exercises.
Is VAT charged on the registration fee?
Invoices for e-DiFTA are issued from France, so French VAT rules apply:
Private individuals: French VAT at the standard rate of 20% applies when you register and are invoiced as a private individual.
Entities established in France: companies, agencies, organisations and public administrations established in France are charged French VAT at 20%.
Entities established outside France: companies, agencies, organisations and public administrations established outside France can be invoiced without French VAT. To benefit from this, a valid VAT number, Tax Identification Number (TIN) or EIN must be provided during registration, as it must appear on the invoice.
For entities established in the EU, the VAT treatment is based on Articles 283-2/283-3 of the French General Tax Code (CGI) under the reverse-charge mechanism. For entities established outside the EU, it is based on Article 259-1 of the CGI. When invoiced without French VAT, the recipient is responsible for declaring and accounting for any VAT or equivalent tax in its own country.
Can I register for more than one course?
No. All eight courses run in parallel from Monday to Friday, so each participant attends one course for the full week.
Do participants receive a certificate?
Yes. Every participant who passes the course receives an official e-DiFTA certificate confirming successful completion of the class and recognising the 35 training hours completed.
Mastering RAM and Volatile Data ends with a knowledge evaluation based on a real case scenario, and Advanced Drone Forensic Analysis (ADFA) ends with a student knowledge assessment.
Is there a special hotel rate?
Yes: €90 per night for a standard single room including breakfast, 12% VAT and city tax (CZK 50, about €2). Double occupancy costs €12 extra for the second breakfast plus €2 per night for the second city tax. The booking link and promotional code are sent after your registration is confirmed.
Seats are limited in every course
Seats are allocated on a “first paid – first confirmed” basis. Register for one course per participant and pay the invoice by bank transfer by 25 December 2026.
