ADF Triage-Investigator® Training 

Digital Evidence Investigator Training

We offer a 1-Day hands-on, instructor-led training for Triage-Investigator® (TINV).  Trainees will learn how to configure Triage-Investigator®, operate the software and interpret results. 

Course Outline

Introductions & Getting Started

  • Digital Forensic Triage Basics
  • Overview of How to Use Triage-Investigator®
    • Triage-Investigator® Terminology – Artifact Captures
    • Triage-Investigator® Terminology – File Captures
    • Triage-Investigator® Search Profiles – Quick, Intermediate, and Comprehensive
    • Triage-Investigator® Workflow

Setup & Installation

  • Triage-Investigator® software installation and the Windows Assessment and Deployment Kit (WADK)

Booting and BIOS

  • Accessing BIOS/UEFI Setup
  • Accessing Boot Menu
  • UEFI and Fastboot Issues
  • Booting Apple Macintosh computers

Capture: Conducting a Scan

  • Case Study: Scanning attached media
  • Case Study: Scanning drive images
  • Case Study: Carrying out a boot scan
  • Case Study: Carrying out a live scan

Analysis: Navigating Triage Investigator

  • Navigating Capture Results
  • Understanding Picture, Video, Keyword, Files and Timeline Views
  • Column Settings
  • Filtering Captures and Picture, Video, Keyword, Files and Timeline Views
  • Tagging
  • Commenting


  • Case Study: Creating appropriate reports
  • Reporting - HTML
  • Reporting - CSV
  • Reporting – Stand-alone viewer


  • Device Imaging

Advanced Issues

  • Importing Search Profiles
  • Implications of thorough file identification and searching within containers
  • File type creation and implications
  • Searching browser cache issues
  • Case Study: Knowledge check

Get in touch with us today to discuss your digital forensic triage training needs, learn more, or set up a private training for your investigators or examiners. 

Request a Quote