Meet the Magnet Forensics Training Team: David Hammersley
Our Training team is growing so we’re continuing our “Meet the Forensic Trainer” series with an introduction to David Hammersley. David is based in the United Kingdom, where he worked as a detective in on various crime tasks forces, focusing on cryptocurrency recovery & blockchain investigations where he developed in-house training for his agency. Read on below!
Want to learn more about what courses are offered? Visit our Training & Certification portal for more information.
MF: Tell us about your life before becoming a Trainer.
DH: I began my career with West Midlands Police in the U.K. at the age of 20, initially working as a response officer before becoming a detective. As a detective, I was involved in a wide variety of investigations including gang-related crime, violence offences, homicides and hostage recoveries. My passion for technology naturally led me to specialize in telecommunications analysis and digital forensics. For the past six years of my policing career, I worked within the Regional Cyber Crime Unit as a Cyber Crime and Dark Web Investigator. In this role, I helped implement cryptocurrency recovery & blockchain investigations as a standard practice, developed in-house training and awareness sessions, led an investigation which dismantled one of the largest counterfeit pharmaceutical operations on the Dark Web, and I was part of a Europol taskforce targeting a prominent ransomware strain.
MF: What made you want to be a Trainer?
DH: Throughout my policing career, I was often asked to deliver training and awareness sessions to colleagues on cybercrime investigations, cryptocurrency, and emerging threats. What started out as a “stitch” by my sergeant soon became one of the most rewarding aspects of my role. Seeing officers apply the skills and knowledge I had taught them to catch criminals that would have otherwise gone undiscovered was really satisfying. As I became one of the longest serving officers on the Cyber Crime Unit, I became a mentor to a number of new officers on the team. Helping and watching them develop gave me a great sense of pride and fulfilment. Seeing others grow in confidence and apply their skills successfully made me realize that teaching others was something I wanted to pursue full-time.
MF: What type of training have you taken part in personally?
DH: Prior to joining Magnet Forensics, I had the Training Annual Pass (TAP), so I have undertaken a number of the Magnet courses including AX250 (Advanced Computer Forensics), AX320 (Internet & Cloud Investigations) & AX310 (Incident Response Examinations). I also completed a number of other forensic provider courses as well as advanced blockchain analysis and networking courses.
MF: What is your favorite part of the role?
DH: I enjoy being able to see the moment when something someone has been struggling with, sometimes for years, finally clicks. It is incredibly rewarding to know you have helped someone get over a hurdle.
MF: What excites you the most about a new class?
DH: I am very much looking forward to the discussions that inevitably come, whether it’s about frustrations with real-world challenges, creative workarounds or emerging trends, I always learn something from students.
MF: Is there a particular moment that stands out the most to you in your career in the classroom?
DH: When I was on the Cyber Crime Unit, I was asked to give a presentation about what we did as a department to people who were looking to join the Regional Organised Crime Unit. 10 minutes before the presentation my boss asked me to do a second input for a team I hadn’t worked on as they were stuck in traffic. Fortunately, I had seen the presentation before and just winged it.
MF: What do students get out of training in person that they can’t get on their own?
DH: Having just come from the public sector, I know the pressures that come with balancing work responsibilities. In a virtual setting, students are often distracted by emails, calls, and other urgent tasks, making it difficult to fully engage in training.
Attending an in-person course provides a dedicated learning environment where students can step away from daily work distractions and immerse themselves in the material. The ability to interact face-to-face with the instructor and peers, engage in hands-on exercises and the discussions that arise make a significant difference in knowledge retention and skill development
MF: How prepared do you feel students are to use Magnet Forensics products after taking the training course?
DH: Magnet Forensics products are pretty intuitive, which is why many digital forensics labs use them without any formal training. That said, after attending several Magnet courses, I quickly realized how many hidden features and time-saving tricks colleagues (who hadn’t taken the courses) were missing out on.
The training isn’t just about learning the basics; it’s about unlocking the full potential of the software. The courses turn a novice, basic, or good user into a power user, making investigations faster, easier, and more efficient.
MF: What is most unique about Magnet Forensics’ approach to training?
DH: Two things stand out to me. First, the scenario-based approach. Instead of learning just tools and features, students go on a journey, working through simulated cases which make the training feel practical and engaging. There is nothing worse than courses where you being told “click here, then click here, then do this”. Magnet’s approach mirrors how actual investigations progress.
Second, Magnet recognizes that these courses are technical and so mentally demanding. The courses are written with frequent breaks built in. This gives the students time to reset and absorb what they’ve learned before diving back into the next topic. It’s a great balance between deep learning and avoiding brain overload.
MF: Why do you think certification is important to examiners?
DH: Certification isn’t just a badge of honor; it’s proof that an examiner has the skills and knowledge to properly use the tools in real investigations. It gives credibility, boosts confidence and in many cases, helps with career progression.
More importantly, in an industry where accuracy and reliability matter, certification ensures that examiners aren’t just clicking buttons and hoping, it shows that they understand the forensic process and can justify their findings. Ultimately, the investigations undertaken by examiners have real-world implications. Certification helps ensure trust and confidence in their work, findings, and the justice they serve.
MF: How do you manage to keep up on the latest trends in digital forensics?
DH: I keep up with the latest trends by following multiple news sources and using news aggregation apps to track developments in digital forensics, cybersecurity, AI and technology. Alongside this, I listen to podcasts covering cyber investigations/incidents and the dark web, as understanding how criminals adapt and use technology helps me identify emerging patterns and techniques.
Recently, I have also been experimenting with ChatGPT for giving me daily briefings. It is currently hit or miss, but it has the potential to be another useful tool to keep up with the ever evolving digital forensics landscape.
MF: What trends do you see coming down the pipeline in digital forensics?
DH: Encryption!
With Microsoft following in Apple with enabling encryption by default, the opportunities for dead box forensics are shrinking. This shift means law enforcement will need to adapt their approach to device seizure, prioritizing live access over traditional forensic imaging.
Instead of early morning warrants when devices are locked and idle, investigators may need to time searches when devices are in use and accessible. This increases the demand for forensic examiners skilled in live examinations, capable of extracting data before it is lost behind encryption. The way we approach digital evidence is changing fast, and forensic capabilities will need to evolve with it.