Insig 2

INsig2 Scripting for Digital Forensic Investigators (SCRIPT)

Program Overview

The INsig2 Scripting for Digital Forensic Investigators (SCRIPT) course is a 36-hour course of instructions taking students through the world of computer scripting and programming.

Students will get basic knowledge and skills they need to be able to prepare and use scripts in their daily work. Through the practical examples and problem solving exercises students will get basic knowledge and understanding of algorithmic thinking and developing algorithms.

Upon finishing the course, students will become proficient in using different operators, program flow controls, data structures, and will be introduced to the concepts of classes, objects and inheritance as an object-oriented model of programming. They will also be able to plan, prepare, and execute programs they have developed.

Through practical exercises, students will learn how to find scripts on the Internet or in digital forensic libraries, understand the code, change or modify it and solve problems they encounter. They will also gain practical skills in scripting and be able to utilize more means of acquiring digital data from the big data sources and process it in shorter time. They will be able to find evidence where other tools were unable to do so, do it in shorter time and make the computer do automatic processing while they work on other cases.

In this course, Python will be used as a scripting language, and PyCharm as script editor. Both, Python and PyCharm, are easy to work with and free to use. Regardless of being the main scripting language, Python is actually already used by main stream digital forensic tools such as EnCase, MPE+, XRY, UFED etc., so Python as a programming and scripting language already has a large community who built digital forensic libraries with a large number of scripts that solve everyday problems.

There are no specific prerequisites for this course. It is even preferable that students who will attend the course have no previous programming or scripting skills, since this is a very BASIC course. Only requisite for taking the class is very good experience in conduction digital forensic investigations, overall good knowledge of digital forensics or passed BCFE class.


EQUIPMENT: All Python Scripting for Forensic Examiners students will receive a laptop computer to take home with them at the successful conclusion of the training event. 

PREREQUISITE: Membership Required. Basic Computer Forensic Examiner [BCFE] course AND completion of the Certified Forensic Computer Examiner [CFCE] certification are highly recommended but not required.  There are no specific course prerequisites for this class. It is even preferable that students who will attend the class have no previous programming or scripting skills, since this is a very BASIC course. The ideal candidate should have experience conduction digital forensic investigations, overall good knowledge of digital forensics or passed BCFE class

When:  To be announced

REGISTRATION:  To purchase training, you must first be a member of IACIS.

To apply for membership for the FIRST time, go to our PRODUCTS PAGE and add the appropriate membership to your cart. (If you’re RENEWING membership, or [doing something else], then [do these things instead]). Next, on the shopping cart page, click the blue “Register” button on the bottom of the page that will walk you through a brief membership application. Your course tuition will cover the cost of your first year of membership.

Once your membership application has been approved, you can purchase certification on the IACIS Products page.

COST: $1,995 US Dollars

    • Cancellation of this class may occur if there are insufficient students registered. In the event of a cancellation, personnel will typically be notified by e-mail within 48 hours of the registration closure date. IACIS is not responsible for any individual expenses incurred as a result of a cancellation. The limit of IACIS financial liability is a full refund of the course fee.

****Payment MUST BE RECEIVED at least 30 days prior to the first day of class. Any payment arrangements other than payment through the website or payment via invoice must be approved by the IACIS Treasurer prior to admittance into the course. Please contact the treasurer for questions and approval (

Cancellations within 45 days from the start of class to 30 days from the start of class will be subject to a $150 cancellation fee. There will be no refunds within 30 days from the start of class.****

LOCATION: This course is taught at the Orlando Marriott Hotel in Lake Mary, Florida (USA). See the link “Book your group rate” at bottom of page.

COURSE SYLLABUS: Scripting for Digital Forensic Investigator Syllabus

COURSE NOTES: Please read the following notes regarding this class:

Classes begin at 8:00 AM ET and conclude at 5:00 PM ET, each day, with a one hour lunch break. Classes will end at 5:00 PM ET on the last day of class. Please do not arrange for departing flights prior to 7:00 PM ET to allow time for travel to the airport and any security clearances.

The dress code for the conference is business casual (collared shirts and slacks). The wearing of shorts, flip flops, tank tops, etc. is not allowed in the classroom. Personal computers are not permitted in the classroom. Students are required to attend all classes to successfully complete the program. Students who fail to meet the attendance requirements will not be issued a certificate at the conclusion of the program.