Hansken Intermediate

Builds a solid foundation for working with the Hansken tactical user interface

The online Hansken Intermediate course is intended for employees of investigative services who already have some experience with Hansken's tactical user interface or who have followed the Hansken Fundamentals course.

What to expect from this training?

This course will provide you with a solid foundation for working with the Hansken tactical user interface. The core abilities required to confidently work with the tactical interface Hansken are presented, including writing Hansken queries for tactical users.

Is this the right course for you?

• Are you new to Hansken or is searching with text, in chat, email, images, videos, browser history, viewing the search history or working with labels, notes and the evidence container a challenge? Then have a look at Hansken Fundamentals.
• Do you already have a lot of experience with Hansken and does the tactical interface no longer hold any secrets for you? Then you are probably more at home in the Hansken Advanced course.

What does the course look like?

• How: Online
• Duration: approximately 4-5 hours (own pace)
• 13 short modules (micro learnings)
• Practical exercises and assignments with explanation/feedback
• Access to the Hansken training environment
• Cre by colleagues

What do you need?

• Knowledge and skills at the Hansken Fundamentals level through practical experience or following the course.
• Access to the e-learning (the e-learnings are available within your own organization or by a provider selected by your organization).
• An account for the Hansken Training Environment.

Send your request for an account for the Hansken training environment to the contact person within your organization. He or she approves the application and has an account created for you. You will then receive your username and password by email, and you can get started right away.

Which skills/knowledge/functionalities will you master after the course?

• You can create an overview of the data and determine where to search (extended).
• Based on what you observe, you can assess your suspects' digital skills and determine what this means for your investigation.
• You can search a large amount of evidence items (such as phones and computers) at the same time.
• You can search with a keyword list.
• You can filter further and further, until you find traces that you are really interested in.
• You know the difference between data and metadata, and you know why this distinction is important for your research. You can search specifically in data, metadata, or both at the same time.
• You can perform more complex searches. You can search for account names and know how to find data to determine the user of an evidence item (for example, a phone or computer).
• You can search for entities such as BSN numbers, credit cards, IBAN numbers or license plates.
• You can browse the folder structure using the explorer in Hansken.
• You can find out which applications that are relevant to the investigation have been installed on items of evidence.
• You know how to see which wireless connections are stored on an evidence item.
• You can build Hansken queries in the tactical user interface to further expand your search capabilities.
• You know how to further develop this skill on-the-job.
• You can perform a targeted search in tags and notes (labels, notes and evidence containers).
• You can work with visualizations.
• You are able to find out how, where and when a trace was created.
• You can interpret traces and evaluate the result of your research.
• You can determine when cooperation with the digital detective/expert is desired.
• You know Hansken's tips & tricks.
• You know how to keep up and keep your knowledge and skills up to date.