International responses
Council of Europe
Promotes international legal standards on cybercrime and electronic evidence, notably through the Budapest Convention on Cybercrime.
Cybercrime Programme Office (C-PROC)
The operational office of the Council of Europe supporting countries in strengthening legislation, international cooperation and institutional capacity to investigate cybercrime and handle electronic evidence.
24/7 Network (G7-24/7 points of contact)
Immediate assistance between states for digital evidence requests.
Tallinn Mechanism (2023)
Framework by the Council of Europe to support states needing rapid emergency assistance on cyber incidents.
Coordinates capacity building, expert deployment, incident response support, including aspects affecting electronic evidence.
International Claims Commission for Ukraine
Special Tribunal for the Crime of Aggression against Ukraine
An international initiative aimed at ensuring accountability for the crime of aggression against Ukraine, where digital evidence and documentation play an important role.
Register of Damage for Ukraine (RD4U)
An international mechanism for documenting claims and evidence related to damage caused by the aggression against Ukraine, including digital documentation.
CyberUA project
A Council of Europe project supporting Ukrainian law enforcement, prosecutors and judiciary in improving the handling of electronic evidence in investigations of war crimes and gross human rights violations.
- CyberUA project
EUROJUST
The European Union Agency for Criminal Justice Cooperation that supports coordination between national prosecutors and investigators, including in complex international investigations and joint investigation teams.
European Union Agency for Criminal Justice Cooperation
ICPA – International Centre for the Prosecution of the Crime of Aggression against Ukraine
A coordination hub supporting the collection, preservation and analysis of evidence related to the crime of aggression.
JIT – Joint Investigation Team on alleged core international crimes in Ukraine
A joint investigative mechanism involving several countries and international partners to coordinate investigations and share evidence related to international crimes committed in Ukraine.
CICED – Core International Crimes Evidence Database
A secure evidence database designed to support the collection and preservation of evidence of core international crimes.
INTERPOL – International Criminal Police Organization
Facilitates international police cooperation and provides operational tools and guidance for cybercrime investigations and digital forensics.
Relevant INTERPOL guidance includes:
The International Criminal Police Organization
- Guidelines for digital forensics first responders, March 2021
- National Cybercrime Strategy Guidebook, April 2021
- Global Guidelines for Digital Forensics Laboratories, May 2019
- Framework for Responding to a Drone Incident for First Responders and Digital Forensics Practitioners, January 2020
These resources help strengthen the capacity of law enforcement agencies to collect and preserve digital evidence.