Peru: ICITAP Delivers Digital Forensics Training, Strengthening Counterterrorism Investigations and Rule of Law Capacity

From May 25–29, ICITAP’s Digital Forensics Advisor delivered a foundational Introduction to Digital Forensics course in Lima, Peru as the third week of the Counterterrorism Investigations and Hybrid Actors training program, convening 26 investigators, prosecutors, and judges from the Peruvian National Police, Public Prosecutor’s Office, and Judicial Branch. The training formed a critical component of a broader ICITAP-led initiative designed to strengthen Peru’s capacity to investigate and prosecute complex counterterrorism cases involving Iranian-backed malign activity and hybrid threat networks in the Western Hemisphere. ICITAP played a central role in curriculum development, technical delivery, and operational integration of digital forensic methodologies that support end-to-end investigative and prosecutorial effectiveness. The course progressively built competency from foundational principles of digital evidence handling and analysis to advanced technical instruction on device architecture, acquisition methods, and forensic preservation standards. Participants examined how different acquisition techniques preserve varying levels of digital data, ranging from full forensic images including deleted content to limited logical extracts of user-accessible information, reinforcing evidentiary reliability for court proceedings. Advanced modules focused on mobile device forensics, including structured practical exercises analyzing hardware components, operating systems, encryption types, and data storage configurations on both Android and iOS devices. ICITAP also introduced operational forensic tools, including mobile triage platforms capable of rapidly extracting device metadata, application data, and forensic backups to support field investigations. These skills directly enhance the ability of investigators to generate admissible evidence while enabling prosecutors and judges to better evaluate digital forensic findings in judicial contexts. The training culminated in demonstrated participant improvement in post-course assessments and reinforced the value of interagency collaboration, with Peruvian officials emphasizing the importance of shared technical knowledge in strengthening both national and international security. This engagement advances U.S. national security interests by improving partner nation capacity to disrupt terrorist networks, counter transnational criminal threats, and strengthen rule of law institutions critical to regional stability and the protection of American citizens and interests abroad. Participants will continue the program with advanced counterterrorism instruction in strategic interviewing. This activity was funded by the U.S. Department of State’s Bureau of Counterterrorism (CT).