PractitionerSelf-paced

Communications and Network Evidence

Read telecom and network records with care, know what they can and cannot prove, and understand the legal controls on interception.

13 lessons3h 12m totalEnglishRecord of Completion

Readiness, not a licence. This course builds knowledge and readiness and ends with a Record of Completion. It is not a government certification and does not by itself grant any licence, authority or regulatory approval.

What you'll learn

  • Explain networks, calls and cell towers simply
  • Read a call record without over-claiming
  • Go from an IP address to a person with care
  • Understand the legal controls on interception
  • Capture and verify online evidence
  • Know where cryptocurrency evidence survives

Who it's for

  •  Investigators and cyber cells
  •  Lawyers testing telecom and network evidence
  •  Telecom and platform compliance teams

No prior training needed for the first lesson. Read it free to judge the level.

Syllabus

Choose a path to see which units are core for you.

Telecom records and interceptionFREE PREVIEW7 units · 1h 42m
  1. Telecom Basics (Part 1): Networks, Calls, and Cell Towers · 16m
  2. Unit 8A · Subscriber Identity: SIM, eSIM, IMEI and Number Portability · 10m · continues “Telecom Basics (Part 1): Networks, Calls, and Cell Towers”
  3. Telecom Basics (Part 2): Cell ID, ILD, and Call Detail Records · 16m
  4. Unit 9A · Cell-Site Evidence: What It Can and Cannot Prove · 16m · continues “Telecom Basics (Part 2): Cell ID, ILD, and Call Detail Records”
  5. Unit 9B · Reading and Checking a CDR · 12m · continues “Telecom Basics (Part 2): Cell ID, ILD, and Call Detail Records”
  6. Telecom (Part 3): IPDR and Lawful Interception · 17m
  7. Unit 10A · From IP Address to Person · 15m · continues “Telecom (Part 3): IPDR and Lawful Interception”
Internet, online evidence and cryptocurrency6 units · 1h 30m
  1. Internet Basics (Part 1): Evolution, Service Providers and Key Concepts · 15m
  2. Unit 11A · Email, Web and Server Logs as Evidence · 12m · continues “Internet Basics (Part 1): Evolution, Service Providers and Key Concepts”
  3. Internet Basics (Part 2): Cable Landing Stations and Undersea Cables · 16m
  4. Internet Evolution (Part 3): Dark Web, Cryptocurrency and Blockchain · 17m
  5. Unit 13A · Following Crypto: Tracing, Exchanges and Seizure · 15m · continues “Internet Evolution (Part 3): Dark Web, Cryptocurrency and Blockchain”
  6. Unit 13B · Open-Source and Online Evidence: Capture and Verification · 15m · continues “Internet Evolution (Part 3): Dark Web, Cryptocurrency and Blockchain”
Final assessment optional · pass 70%
A timed assessment over the whole course. Pass at 70% to earn your Record of Completion.

What this means where you work

The skills are the same everywhere. The legal and licensing rules differ by country, so each course carries a country card that follows your edition.

Electronic evidence and lawful access in Australia

◐ Partial coverage
About this card
This card covers Commonwealth law only. Each State and Territory has its own evidence, search and surveillance laws, and they differ in detail. Check the law of the court and the agency you work with. Checked on 12 November 2026.
What you must do
  1. Check which evidence Act applies in your court: the Commonwealth Act or a State or Territory Act.
  2. Keep a record of how each copy or output was made, so its contents can be proved under s.48 and the device presumption can apply.
  3. Obtain evidence lawfully. Improperly obtained evidence may be excluded under s.138.
  4. Do not intercept communications or access stored communications without the warrant or exception the TIA Act provides.
  5. Ask for telecommunications data only through an authorisation by an authorised officer of an enforcement agency.
  6. Use a surveillance device or access a computer covertly only under a warrant.
Local term
Document: Any record of information, including anything from which sounds, images or writings can be reproduced.
Local term
Stored communication: A communication held on equipment of a carrier that cannot be accessed without its help.
Local term
Telecommunications data: Information about a communication, not its content, that service providers keep.
Local term
Section 3LA order: A magistrate's order that a person help police access data on a computer or device.
Show the law (11 entries)
Law
Evidence Act 1995 (Cth), s.48 (Proof of contents of documents)
Law
Evidence Act 1995 (Cth), s.51 (Original document rule abolished)
Law
Evidence Act 1995 (Cth), s.138 (Improperly or illegally obtained evidence)
Law
Evidence Act 1995 (Cth), s.146 (Evidence produced by devices)
Law
Evidence Act 1995 (Cth), s.147 (Business documents produced by devices)
Law
Telecommunications (Interception and Access) Act 1979, s.7 (No interception)
Law
Telecommunications (Interception and Access) Act 1979, s.108 (No access to stored communications)
Law
Telecommunications (Interception and Access) Act 1979, s.178 (Existing telecommunications data)
Law
Telecommunications (Interception and Access) Act 1979, s.187C (Data retention period)
Law
Surveillance Devices Act 2004, s.10 (Types of warrant)
Law
Crimes Act 1914, s.3LA (Assistance to access data)

Who wrote this

VSVSV training faculty

Written by the VSVSV training team from its own lesson scripts and guidebooks, rewritten in plain international English. Points of law and country rules were checked against official sources, and each country note shows the date it was checked.

Your Record of Completion

SAMPLE

LEA.Training · Record of Completion

Communications and Network Evidence

This records completion of training. It is not a licence or government certification.

A. Learner

completed the course and passed the final assessment.


Record number 0000 0000 0000 0000 · Verify at lea.training/verify

The public verify page shows only name, course, date and status. Nothing else.

Common questions

Does it teach how to intercept communications?
No. It explains what telecom and network records show, what they cannot prove, and the legal controls on interception. It teaches no technique for covert access.
Will it help me read a call record?
Yes. It walks through call records, cell-site evidence and IP addresses, with the common ways people over-claim what they show.
When can I take the final assessment?
When you have marked complete the units that are core on your path. The final draws its questions from those units. If you did not choose a role, every unit counts.
Is this legal advice?
No. The course teaches how the law and practice work. For a real case, follow your organisation's procedures and take advice from a qualified lawyer where you work.
Is this an official licence or certification?
No. LEA.Training is a private training provider. A course builds knowledge and readiness and ends with a Record of Completion. It is not a licence, a regulator's certificate or an accreditation, and it is not endorsed by any government agency.
Can I try it before I pay?
Yes. The first lesson of each course is open to read, with no sign-up.
How do I get a Record of Completion?
Finish the lessons, then pass the course’s final assessment with 70% or more. Your Record carries a number and a QR code that anyone can check on the verify page. It shows only your name (or initials), the course, the date and its status.
How long do I keep access?
Paid access lasts 12 months from the day you buy. You can study at your own pace and come back to any lesson during that time. Your Record of Completion stays verifiable after access ends.
Who sells the course, and how is tax handled?
In the Australia edition the seller is Vanaranya LLC. Tax, where it applies, is calculated at checkout from your billing country.
Can I buy seats for my team?
Yes. Agencies, firms, colleges and companies can buy seats, assign the right path for each role and see progress and results. Larger teams get a discount. See For organisations.