CyberSEE strengthening capacities in digital forensics and electronic evidence - Cybercrime - Council of Europe

WWW.COE.INT HUMAN RIGHTS DEMOCRACY RULE OF LAW ABOUT US English Connect Cybercrime CyberSEE strengthening capacities in digital forensics and electronic evidence BELGRADE, SERBIA 4-5 NOVEMBER 2025 Diminuer la taille du texte Augmenter la taille du texte Imprimer la page From 4 to 5 November 2025 the CyberSEE joint project of the European Union and the Council of Europe contributed to organising the Digital Forensics Conference 2025, in Belgrade, Serbia. The event gathered over 200 prosecutors, judges, cybercrime investigators, forensic specialists, and officials from the Ministries of Justice, alongside experts from the private sector, cybersecurity industry, and financial services across South-East Europe and Türkiye to exchange good practices and strengthen their technical and operational capacities in digital forensics, cross-border investigations, and the handling of electronic evidence. During the first day, the attendees explored how cybercriminal networks operate across borders and how investigators, and private companies can respond effectively. Participants also examined topics such as tracing online criminal networks, Open Source Intelligence (OSINT)-based methods, and the evolving landscape of anti-money laundering and countering the financing of terrorism (AML/CFT) standards in the digital economy. The session “Challenges and Solutions in Cross-Border Cybercrime Investigations and Live Acquisition of Electronic Evidence” led by CyberSEE experts delved into live data forensics and encryption handling techniques, emphasizing through case studies, the practical challenges of evidence acquisition and analysis, while showcasing how live forensics differs from traditional approaches. On the second day, the discussions underlined the importance of data integrity, governance, and cross-border cooperation in crypto investigations. A highlight was the Operation PATHFINDER session which showcased real-world police collaboration between the Czech Republic and Ukraine and illustrated how effective cross-border cooperation, data sharing, and forensic readiness can sustain investigations even under crisis conditions. The event concluded with two hands-on workshops, one addressing the Suspicious Activity Reports (SAR) / Suspicious Transaction Reports (STR) on compliance reporting for U.S. and EU financial intelligence units, and one on ransomware investigation providing participants with practical skills for tackling emerging financial and cyber threats. The conference enabled participants to strengthen their knowledge on digital forensics and to improve their skills to address operational challenges in cybercrime investigations, while also serving as a networking opportunity and as an enabler of public-private cooperation. CyberSEE Project will continue to support criminal justice authorities across South-East Europe and Türkiye in investigating, prosecuting, and adjudicating cybercrime cases and in the effective use of electronic evidence, reinforcing regional collaboration and sustainable capacity building.  Cybercrime Programme Office (C-PROC)  CyberSEE Project  Ransomware Resource  Ransomware: New Guidance Note by the T-CY