

Maximising investigative opportunities from Gaming Consoles, 4 March 2026
Latest in our Digital Investigation in Action series providing innovative operational best practice to help inform and enhance your digital strategy.
Our exclusive workshop aims to provide an operational insight into the investigative opportunities that can be gleaned from gaming consoles.
They have the potential to contain a wealth of investigative opportunities that are often missed or misunderstood. We’ll provide you with all the latest best practice, tips and techniques and the current challenges and pitfalls to maximise the evidential potential of gaming consoles.
Who should attend?
The workshop is suitable for investigators, analysts, digital media investigators, digital forensics practitioners, safeguarding professionals and other personnel involved in the identification, seizure, examination or investigation of mobile devices.
No specialist technical knowledge is required.
Our expert
The workshop will be delivered by Neil Greenough, one of the UK’s most experienced digital investigators having served 30 years in Lancashire Constabulary. He was one of the first digital media investigators and provided digital advice on hundreds of major crime investigations as well as presenting his best practice case studies at numerous national conferences and CPD events. He has also worked in industry delivering digital training courses. He now runs his own digital training company.
Outline of the day
Session One: It's a games console… but what else could it contain?
Modern gaming devices are connected computers capable of holding accounts, communications, browsing activity, cloud data, media and other potentially valuable digital evidence. Many are not readily supported by conventional forensic extraction tools, creating different challenges for investigators.
We’ll explore the following:
-
🎮 PlayStation 5: less obvious browser functionality, accounts, communications and cloud opportunities
-
🟢 Xbox: Edge browser, Microsoft accounts, messaging, cloud services and connected devices
-
🔴 Nintendo Switch: Nintendo accounts, network activity and BrewDNS browser functionality
-
🖥️ Steam Deck: SteamOS, Linux Desktop Mode, removable storage and dual-boot operating systems
-
💻 ASUS ROG Ally & Lenovo Legion Go: Windows gaming devices capable of containing the same types of evidence as a conventional PC
-
🔎 Other Consoles & Handhelds: recognising devices and features that may easily be overlooked
Investigative Considerations
-
Hidden and less obvious web browsing
-
Gaming messages, friends and social connections
-
Multiple users, profiles and accounts
-
Internal, removable and cloud storage
-
Dual-boot and alternative operating systems
-
Gaming platforms linked to Discord and other communications services
-
Companion apps on smartphones and computers
-
Opportunities within Microsoft, Sony, Nintendo and Steam cloud ecosystems
-
What to consider when traditional forensic extraction isn't available
Session Two: Gaming, social media and cloud data. The console may only tell part of the story
Modern gaming is also a social-media environment. Gaming accounts can contain identities, communications, friendships, communities, media, purchases and other potentially valuable investigative information - much of it held online rather than on the console itself.
The session considers how investigators can identify and obtain gaming-related information through lawful account access, user-accessible account downloads/data exports, associated email accounts, companion applications and appropriate provider/legal request processes.
It will also consider the importance of preserving downloaded data, recording the method of acquisition and converting exported information into a format that can be reviewed and evidenced.
We’ll explore the following:
🎮 Steam: profiles, friends, groups, community activity, chats, purchases and gaming history
💬 Discord: servers, channels, direct messages, group chats, friends, attachments and account information
📺 Twitch: profiles, followers, subscriptions, chats, streams and community activity
🟢 Xbox Network / Xbox Live – Microsoft account data, friends, messages, achievements, captures and gaming activity
🔵 PlayStation Network – profiles, friends, messages, gaming activity, purchases and associated account data
🔴 Nintendo and other gaming ecosystems – accounts, friends, activity and connected services
We’ll also consider what data could be available. This might include:
-
Usernames, profiles and account identifiers
-
Friends, contacts and social connections
-
Direct and group communications
-
Servers, communities, groups and channels
-
Images, videos and other shared media
-
Gaming and account activity
-
Purchases, subscriptions and transaction history
-
Login, device and account information
-
Links to other online identities and platforms
Held online via Teams
Certificates of CPD available
HOW TO BOOK
Cost: £214.99 + VAT (GBP) per delegate per workshop (LEA and Government Agency rate). £249.50 + VAT (Industry rate), per delegate
Group bookings: We offer various discounts for group bookings depending on numbers, please contact us for details.
Booking: Please send the delegates name(s), email address(es) and purchase order (made out to The Investigator) to booking@the-investigator.co.uk or telephone +44(0)844 660 8707 for further information.
Payment can be made by PayPal/debit/credit card. The meeting link will be sent out 7 days before the event.

