First Place at the eSafe Okan University Digital Forensics Competition: Expertise Recognized on the Academic Stage

Digital forensics is not merely a technical discipline. It is a field of expertise that can exist at once in the courtroom, at the corporate investigation desk, and in the academic research laboratory, and that is continually put to the test within itself. In Turkey, one of the most concrete indicators of this test is the categorized digital forensics competitions held by universities. These competitions assess not only theoretical knowledge but also solving real evidence scenarios under time pressure. The first place we achieved as DSET at the eSafe Digital Forensics Competition held by Okan University is the certification, by an independent academic jury, of our expertise on this stage.

On this page, we transparently convey both the framework of the competition and the meaning of this first place within DSET's corporate identity to the lawyers, corporate legal counsel offices, and individual applicants who will work with us in the future.

The eSafe Project: Cyber Security and Digital Forensics on the European Stage

The eSafe Project is a Europe-focused initiative carried out to generate awareness in the field of cyber security and digital forensics, to develop educational materials, and to prepare young researchers for the field. The European Union's broad cyber security policy foregrounds the goal of combining organizations' security culture with technical skill. One of the academic reflections of this policy is university-based competitions and certified work. The events carried out under the eSafe banner are the most visible arm of this reflection on the Turkish academic stage.

When a competition carries the "eSafe" banner, it is not merely a Turkish event; it has accepted an assessment paradigm aligned with the international cyber security framework. The standard reference for this alignment is the ISO/IEC 27037 framework, which describes the guide for the identification, collection, packaging, and preservation of digital evidence. No matter how creatively the competition tasks are designed, in the end the fundamental criterion the jury looks at is the same: did the candidate collect the evidence without corrupting it and analyze it within a verifiable flow? For this reason, success in academic competitions in Turkey is not merely a local medal but the proof of a universal standard in a local arena.

Okan University and Its Academic Digital Forensics Program

As announced on its official website, Okan University is one of the academic institutions that has invested corporately, for years, in the disciplines of information security and digital forensics. The university's digital forensics and cyber security themed work is carried out through both its associate and graduate programs and through events open to industry participants. These programs are designed to build the bridges between criminal procedure, personal data protection legislation, and international standards.

The academic institution's investment in this discipline also directly determines the quality of the competitions, because the academics who design the scenarios are people who know how the subjects they teach are reflected in the field. If a competition has a setup resembling a real case, behind it is an academic staff with years of laboratory experience. This carries the value of the competition far beyond that of a certificate contest.

Competition Format: Candidates, Categories, Jury

The common framework of academic digital forensics competitions is built on three main pillars. The first is the candidate profile: participants include students, working experts, in-house digital forensics specialists, and independent consultants. This diversity is what makes the competition result a strong reference, because the winning candidate stands out not just as the best in their own category but as the best of a pool with multiple profiles.

The second is the category system. A typical digital forensics competition divides the different layers of digital evidence into separate tasks. These layers cover areas such as mobile device forensics, network traffic analysis, memory (RAM) analysis, malware reverse engineering, and file system and disk image analysis. Each category requires a different tool set and a different discipline of evidence integrity. A candidate may shine in a single category; but the jury score is generally calculated on multi-category performance.

The third is the jury. In an academic competition, the jury consists of academics from the university staff, senior experts invited from industry, and, where necessary, representatives of public institutions that carry out cyber security policy. This multiple jury structure preserves academic impartiality while also bringing the reality of the industry to the table. For this reason, the first place that emerges from the competition is neither merely a theoretical award nor purely an industry reference; it is the intersection of both.

The Participation of DSET and Hamza Aytac Doganay

DSET's founding digital forensics expert, Hamza Aytac Doganay, is a specialist who has developed the discipline of digital forensics throughout his career not only at the desk but also in the field. He has managed files across a wide spectrum, from corporate investigations to court expert witnessing, from personal data breach examinations to advanced memory analysis cases. This accumulation also forms the background to the decision to take part in the eSafe Okan University Digital Forensics Competition.

The competition stage does two things for an expert. First, it tests reflexes built up over years in the field against a standard set of tasks. Second, it objectifies these reflexes under the gaze of an independent jury. DSET treats this test not as a show of strength but as the academic verification of its corporate identity. Because behind an expert opinion to be submitted to court, there must be both years of field practice and an expert standing recognized by the academic world.

The Industry Significance of First Place

The first place achieved in the competition contributes to DSET's corporate value in three dimensions. The first dimension is a visible academic reference. In court or at the corporate legal counsel desk, regardless of who wrote the report, whether the expert has an entry point onto the academic stage is questioned. First place shows, beyond dispute, that we have passed through that gate.

The second dimension is multi-category competence. The rank of first place requires the jury to observe sustained performance across all categories. This confirms that DSET is not confined to a single sub-area of digital forensics but is a center of expertise capable of addressing mobile device forensics, network analysis, RAM analysis, and file system analysis as a whole. Our range of files, extending from mobile-focused cases such as WhatsApp evidence examination to RAM image analysis with the Volatility framework, is the field counterpart of this multi-category competence.

The third dimension is methodological discipline. First place is the recognition not only of reaching the correct answer but of conducting the path to that answer while preserving the integrity of the evidence. Methodological discipline requires working together with the KVKK and chain-of-custody axis of the digital forensics process. The competition scorecard is a self-audit tool through which the jury also assesses this methodological discipline.

The Technical Competencies Gained

The first-place category confirms which tool sets an expert has mastered and under which conditions they can decide which method to use. Among the core technical competencies the academic stage tests are the following:

Mobile device forensics requires both physical and logical imaging techniques to be applied to the right scenario in the right order. The competitor moves along the fine line between taking an image without corrupting the device and extracting evidence from the image.

Network traffic analysis covers the ability to derive anomalous behavior from packet capture files (PCAP), to identify malicious command-and-control channels, and to document traces of data exfiltration. This competence speaks the same language as the incident response side in corporate investigations.

Malware reverse engineering is a discipline where static and dynamic analysis converge. The competitor is expected to run the binary in a controlled environment, record its behavior, and decode its logic from the disassembly output.

Memory (RAM) analysis is the discipline of preserving and analyzing live data, referred to as volatile evidence. In Turkey's judicial practice, the correct handling of volatile evidence is a decisive criterion in the acceptance of expert reports. Our accumulation on the structure, format, and sections of an expert report also makes it possible to translate competition performance into the language of written proof.

The hash chain and evidence integrity are the foundation upon which all these categories rest. From the moment the image is taken to the moment the report is written, the cryptographic digest (hash) chain must be kept uninterrupted at every stage. This is the most concrete output of the ISO/IEC 27037 framework in local practice.

The Meaning of the Academic Stage: The Road to DSET Academy

The longest-term result of first place for DSET is the birth of DSET Academy, which institutionalizes the bridge between academia and industry. The fact that, with more than 1,350 graduates today, we have become one of the main addresses of digital forensics education in Turkey is the product of our decision to transform our field case accumulation into an academic format. The first place won in the competition is one of the core motifs behind this decision, because the expertise recognized by the academic stage forms a legitimate basis for teaching on that stage.

DSET Academy is not merely a course center that transfers information. It is also an academic unit that teaches the language of judicial practice, such as the analysis of the patterns in which the Court of Cassation rejects expert reports. Among the subjects we address in our training are Ankara-focused digital forensics expert witnessing and expert opinion practices. These subjects are the translation of academic first place into the daily language of the field.

Alignment With TUBITAK BILGEM and the Domestic Academic Ecosystem

One of the official reference centers for digital forensics and cyber security research in Turkey is the work carried out at the National Research Institute of Electronics and Cryptology within TUBITAK BILGEM. The documents published by this institution are the domestic road maps that public institutions and the private sector consult when structuring their cyber security policies.

A digital forensics expert's success on the academic stage is not limited to an award given by a single school. It also proves the ability to think in alignment with the domestic academic ecosystem. DSET generates corporate value from standing on the same plane as international standards such as ISO/IEC 27037, the events of local academic institutions such as Okan University, and the doctrines of public research centers such as TUBITAK BILGEM.

The Place of Academic Accreditation From an E-E-A-T Perspective

Within the E-E-A-T (Experience, Expertise, Authoritativeness, Trustworthiness) framework named in Google's search quality rater guidelines, academic accreditation is positioned as one of the most concrete proofs of authority. The "years of experience" sentences listed on a digital forensics office's web page remain mere marketing language unless they are tied to a verifiable academic reference.

The first place at the eSafe Okan University Digital Forensics Competition is this ring of verifiability for DSET. A law firm wants to be able to show that the expert behind the expert opinion it will submit to court is recognized by an independent academic jury. DSET has been building the corporate structure that meets this expectation since the 2010s.

The Certificate Value of Competition Awards

First place won in an academic competition is not merely a plaque. Although the certificate issued by the university does not carry the document value of a graduation diploma, it works as a corporate reference. This certificate is among the documents our corporate clients and lawyer partners request to support their decision to choose DSET in their internal audit processes.

In addition, the competition certificate remains in the expert's professional biography as a reference point on the academic stage. In a file reopened years later, it provides a concrete answer to the court's question, "what are the academic references of the expert who wrote the report?"

The Future of Digital Forensics Education in Turkey

Turkey has been advancing rapidly in digital forensics education in recent years. The modules added to universities' graduate programs, the diversification in certificate programs, and the institutionalization of academic competitions are the visible steps of this path. At the same time, demand in the field grows every year. Personal data breaches, financial fraud, intellectual property violations, and internal investigations arising from employment relationships are expanding the volume of the field.

DSET is not a passive observer of this future picture. References such as first place at eSafe Okan University build, from today, the legitimacy of the training we will provide in the future. At the same time, they set a course for the young researchers considering stepping into the field as to which path they should follow.

DSET Academy: The Multiple Continuity of the Field

The current state of DSET Academy is the result of years of accumulation. Behind every technical procedure we teach in the classroom is an expert report submitted to court, an expert opinion given to a corporate investigation, or a task closed in an academic competition. This multiple continuity is not something a course structure alone could produce. The field, the academic stage, and the classroom must look at the same landscape through three separate windows.

The fact that our office is located at the Hacettepe Teknokent, Ankara address is the physical counterpart of our decision to think together with the university ecosystem. The Teknokent environment allows us to be under the same roof with both young researchers and corporate clients. This location is one of the infrastructure choices that keeps DSET Academy's digital forensics certificate programs close to academic reality.

Get in Touch With Us

Our lawyer partners, corporate legal counsel offices, corporate security units, and individual applicants can get in touch with us both for your litigation processes and for our training programs.

• Office address: Hacettepe Teknokent, Ankara
• For applications and calendar information for the DSET Academy digital forensics certificate program, you can get in touch with us directly.
• Phone: +90 536 662 38 09

First place at the eSafe Okan University Digital Forensics Competition is the certificate that registers DSET's corporate identity on the academic stage. This reference, which remains meaningful at once in the courtroom, at the corporate investigation desk, and in the training classroom, is the clearest proof we can offer to every applicant who decides to work with us.