PROF.MORRIS
file_06 · education
← Constellation Get in touch ↗
file_06 · education

Serious content,
actually enjoyable
delivery.

Teaching grounded in real casework, not slides about real casework. UG, MSc and PhD at the University of Southampton. Practitioner short courses through Sherfox Labs. Outreach into schools and public engagement. Theory exists to support practice — not the other way around.

9+Current PhDs
15+CPD courses
25+Theses supervised
9Education awards
UG · MSc · PhD Practitioner CPD School outreach Cyberly scenarios Op Art Thief Op Heartless Op Teapot Tempest Practitioner-led UG · MSc · PhD Practitioner CPD School outreach Cyberly scenarios Op Art Thief Op Heartless Op Teapot Tempest Practitioner-led
— teaching philosophy

Real cases.
Strange devices.
Evidence-led
thinking.

Pick three of these cards that resonate and you've probably got the start of a project.

🔍

Operational focus

Only supervise projects with real potential. If it couldn't support a real investigation, it's probably not a good fit. That doesn't mean polished — it means purposeful.

🎭

Cyberly world

A fictional investigative world used to explore very real forensic problems. Ideal for scenario design, tool testing and decision-making research.

✉️

Before you email

Always ask to see an attempt first. Not because perfection is expected — but because your first ideas show how you think. A messy start beats a polished guess.

🤔

Good project test

What evidence exists? Who would rely on the result? What decision depends on it? What could go wrong?

📚

Research tips

Look at real cases, not just papers. First principles matter. Practitioner-led literature is your friend. Protect evidence first, always.

🧩

Stuck?

Being stuck is normal in forensic work. It usually means you're doing something real. Bring questions, not answers.

— current modules · UoS

What's taught
at Southampton.

Undergraduate and postgraduate modules at the School of Electronics and Computer Science, all grounded in real investigative practice.

COMP6254
Digital ForensicsUG · Foundations of digital forensic practice, evidence handling, methodology
AICE1001
Ethics and Security of ComputingUG · Core principles relating to ethics and security in computing
— short courses for practitioners

Hands-on. End-of-course test.
Taught by active practitioners.

Practitioner-focused CPD courses delivered through the University of Southampton, with full course details at Sherfox Labs. Real casework guides every session. Research skills are built in so you can keep learning independently after the course ends.

🏁 FoundationsStart here
Digital Forensic EssentialsThe practitioner foundation course — methodology, evidence handling, principles.
📱 Device FocusedDevices · IoT · acquisition
💾 Data Capture WizardAcquisition & storage media
📱 Mobile SleuthMobile device investigations
🔌 IoT InspectorUnusual devices & IoT forensics
🔎 Scene AnalysisScene · CCTV · IR
🏛️ Scene SpecialistConducting scene investigations
📷 Guardian EyeCCTV analysis
🛡️ Security SentinelCorporate security & incident response
🧪 Technical MasterclassDeep technical practice
🌐 AppTrackerBrowser & app forensics
💬 Comms Data AnalyzerAnalyzing communication data
🕵️ Cyber SleuthNetwork & corporate investigations
📄 Document DetectiveAnalyzing digital documents
🎥 Multimedia MarvelMultimedia forensics
🔭 OSINT OperativeOpen source intelligence techniques
🏆 Advanced & PresentationFor experienced practitioners
⚡ Digital Forensics MasterclassComprehensive advanced practice
🗣️ Evidence ArticulatorCommunicating digital evidence
🦊 Course details at Sherfox Labs ↗
— supervision

Open to research
students.

PhDs, MPhils, MSc by Research and MSc projects through UoS.

Available to supervise PhDs, MPhils, MSc by Research and MSc projects through the University of Southampton. Only projects with operational potential — if it couldn't plausibly support a real investigation, it's probably not the right fit.

25+ theses already supervised across digital forensics, mental health in DFIR, mobile forensics, document analysis, browser artefacts, IoT acquisition, and the long tail of unusual devices.

Discuss a project →
— outreach

Schools, public,
and case-based games.

Outreach extends from school workshops through to public engagement and science festivals. All available through the University of Southampton, subject to availability.

🏫

School talks & workshops

What is Digital Forensics? · Careers in DFIR · Maths in Digital Forensics · Women in Computing · Digital Privacy · Catching the Bully: Online Traces.

🎮

Interactive workshops

Op Art Thief (1 day) · Op Heartless (2 hours) · Op Teapot Tempest (multipart, flexible). Full investigative scenarios, age-appropriate.

🌍

Public engagement

Talks at all levels · Interactive case-based games · Online privacy activities · Science and careers events.

Book outreach → See public presence →
— past life

Before
Southampton.

A selection of previous educational activities and commitments — pre-UoS era.

🏛️ Past Roles

Education
Assistant Deputy Director of EducationFuture and Technology
Director
Course DirectorMSc Digital Forensics
Manager
Module Manager9 Digital Forensic Modules
Cranfield era
Multiple senior teaching rolesSpanning UG and MSc digital forensics

🎤 Selected Invited Talks

Talk
Using Digital Evidence to Aid Human Identification
Talk
Digital Investigation of CyberTerrorism
Talk
What is Digital Investigation?
Talk
Maths in Cybercrime Investigations
Talk
Document Dissection
Talk
Hunting for Digital Devices
Talk
Advanced Data Recovery
Talk
Extracting Data from the Unknown
Talk
Securing Evidence for IT Service Desks
Workshop
The Case of the Stolen Artwork (school)
Careers
Careers Talk: Digital Investigation

📚 Modules Managed & Taught

Module
Digital Crime and Investigation
Module
Forensic Computing Foundations
Module
Internet Forensics
Module
Network Forensics
Module
Digital Forensics with Open Source Tools
Module
Advanced Forensic Computing
Module
Programming For Digital Forensics
Module
Mac OS Forensics
Module
Digital Forensic Project
Other case files
Get in touch