DFRTI Internship Programme

The internship exists for one reason. Most people who finish a forensics course have never imaged a drive under time pressure, defended a hash mismatch to a senior or rewritten a report because the reader could not follow it. Those are the things a lab checks on your first day, and they are learnt only by doing them with someone watching.

You are matched with a mentor based on the area you want to work in, whether that is storage, mobile, network and cloud, incident response, video or the legal side of evidence. You then work through a series of practice cases that grow in difficulty. Your mentor reviews each stage, from the intake notes to the final report, and tells you plainly what to fix. The pace is set around your studies or work and agreed when you start.

DFRTI is an independent institute. The internship teaches method, not a vendor product, so you learn to check a tool rather than trust it.

Selection is not a marks cut-off. The conversation looks for a genuine interest in digital evidence, basic comfort with computers and the willingness to document and to be corrected. Those three predict whether an internship works far better than a grade sheet does.

Places depend on which mentors are available in the area you want. If no mentor can take you on at the time, DFRTI says so and suggests a course or a later start rather than leaving you waiting. Every applicant hears back either way.

An intern completes the programme by finishing the assignments agreed with the mentor to the standard the mentor sets, keeping case notes for each one, submitting the reports and passing a final review. The review is a conversation about your work in which the mentor checks that you understand why each step was done, not only that it was done.

Where an assignment does not pass, the mentor says what to fix and you resubmit. There is no limit on learning from a correction. The requirements are the same for every intern in an area, and they are agreed in writing at the start so that there is no doubt about what completion means.

A DFRTI internship completion certificate is given when the completion requirements are met. It names the area you worked in and records that your assignments and final review were accepted by your mentor.

It is an institute certificate issued by DFRTI, an independent educational and research institute. It is not a government qualification, not a vendor certification and not one of the DFRTI certifications such as DCFA, DCMFE or DCNI, which have their own courses and assessments. It shows an employer what you have done, which is its purpose.