University of Southampton · Est. 2022
Digital Exploitation · Intelligence · Forensics
"Brains, heart, and a touch of cheese."
Operational & Research Laboratory · Opening case files…
click anywhere to skip
SherFox Labs SHERFOX LABS
Digital Exploitation · Intelligence · Forensics · Est. 2022
Casework Active
SF-LAB-2022
ACTIVE
Operational & Research Lab · Univ. of Southampton
WE FIND
WHAT
OTHERS
MISS.
Digital Exploitation · Intelligence · Forensics
We recover evidence from the unusual, damaged, legacy, and overlooked — what others can't reach. 250+ years combined. 27 strong.
DFIRMobile & IoTOSINTVehicleLegacyComms
Need a Digital
Investigator?
Smartphones to ships. Exploitation to evidence. Prof. Sarah Morris — 16+ yrs active casework.
📊 Numbers
Combined Exp.
250+
Awards
20+
Courses
15
Team
27
Lab Motto
“Brains, heart, and a touch of cheese.” 🧀
We Campaign
Mental health in DF. Churchill Fellowship. We advocate loudly. 💛
SherFox Labs
🦊logo.png
The Den — Our Team
👥
Team Photo
The Den
🔍 Investigations
Unusual. Legacy. Damaged. We recover what others can't.

Computer · Mobile · IoT · Vehicle · Maritime · CCTV · OSINT · Dark Web · Comms · Electronics · Legacy Devices · Data Recovery · Incident Response · Expert Witness
► OPEN DOSSIER + CASE FORM
Lab Equipment
🔬
Lab Equipment
Lab Equipment
📚 CPD Training
Courses
15
First principles. 50%+ hands-on. Cyberly world. 4-day courses from £1,600–£4,500. Bursaries available.
► CATALOGUE + BOOKING
Training World
Cyberly — fictional investigation universe. Safe. Trauma-informed. Fun. 🌐
Download
📄 Services Brochure
📄 Course Brochure

click to download
Get In Touch
hello@sherfoxlabs.com
(+44) 23 8059 3441
ECS Partners Ltd
Southampton SO17 1BJ
Home-Built Tools
ReviewBox · SCOUT · AURORA · SignalSentinel · BOB · SpectrumAcquire · The Lattice · Cyberly
LAB NOTES
Active research:
· IoT Crime Scene Room
· Mental Health in DF
· Data Destruction
· Cyberly World

Aim: Ig Nobel 🔥
→ projects + collab
Unofficial Aim
Win an Ig Nobel. Yes, really. 🔥🧪
IoT Crime Scene Room
🏛️
IoT Scene Room
IoT Scene Room
Accreditation & Research Group
University of Southampton is an NCSC Academic Centre of Excellence in Cyber Security.

We sit inside the Cyber Security Research Group 🏛
Lab Policy 📷
Cheesy jokes: non-negotiable. Click for evidence. 🧀🦊
💛 Mental Health in DF
National campaigning. Churchill Fellowship. Trauma-informed practice everywhere we go. We talk about it openly.
► OUR APPROACH + RESOURCES
Cyberly World
🌐
Cyberly World
Cyberly World
Hours / Triage
~10:00–16:00 UK, Mon–Fri. Add “URGENT” to subject. We’re academics — patterns vary. ⏳
CPD Bursaries Available
Unemployed practitioners · SherFox alumni · independents · SMEs

Email us to apply 💚
SherFox Labs SHERFOX LABS
Digital Exploitation · Intelligence · Forensics · Training & Research
ACTIVE · EST. 2022
WE FIND
WHAT OTHERS
MISS.
Award-winning digital forensics practitioners at the University of Southampton. 250+ years of combined experience. Serious about the science. Less serious about everything else.
250+
Years combined experience
20+
Teaching awards
27
Team members
Investigations
Need a Digital Investigator?
From smartphones to ships. From courtrooms to corporate. No device too strange. No case too urgent. Led by Prof. Sarah Morris with 16+ years of active casework.
🦊 Why SherFox?
›
We solve digital mysteries with unmatched expertise, geeky passion, and a dash of cheesy fun.
🔬
All Devices
Smartphones to ships, drones to databases
⚡
Urgent & Complex
We thrive on challenging cases with tight deadlines
🧠
Uncommon Expertise
Reverse-engineering unusual devices and formats
💛
Trauma-Aware
We look after people, not just data
🏆
Award Winning
20+ teaching awards, outstanding feedback
🏛️
NCSC Accredited
University of Southampton
🦊 About SherFox
›
"Brains, heart, and a touch of cheese."
Founded by Prof. Sarah Morris after running DF labs at Cranfield/Shrivenham. Now based in the School of ECS at the University of Southampton. Our team of 27 spans computer science, policing, law, electronics, and corporate investigations.
👥 The Den — Our Team
›
27 people strong — academics, practitioners, researchers, and friends of the den. Not everyone is public-facing, but every one of them is extraordinary.
🔍 Investigations
›
Specialist digital forensic support. Led by Prof. Sarah Morris with 16+ years of active casework — local, national, and international.
📱
Mobile & IoT
Smartphones, wearables, connected devices
💻
Computer Forensics
Acquisition, recovery, analysis
🚗
Vehicle & Maritime
Infotainment, telematics, drones
🌐
Network & OSINT
Dark web, comms data, cybercrime
📹
CCTV & Multimedia
Video analysis, image forensics
⚖️
Expert Witness
Legal reports and court proceedings
📚 CPD Training
›
Cyberly World
A universe built for safe learning
Our fictional Cyberly environment — safe, trauma-informed, and genuinely fun.
15 practitioner-led courses. First principles. 50%+ hands-on. 4-day courses from £1,600 – £4,500. Bursaries available.
Foundations
🏗️
Digital Forensic Essentials
The complete foundation for all forensic work
8 days
Device Focused
💾
Data Capture Wizard
Acquisition & Storage Media
5 days
📱
Mobile Sleuth
Mobile Device Investigations
3–5 days
🔌
IoT Inspector
Unusual Devices & IoT Forensics
5 days
Scene Analysis
🏛️
Scene Specialist
Conducting Scene Investigations
3–5 days
📹
Guardian Eye
CCTV Analysis
5 days
🛡️
Security Sentinel
Corporate Security & Incident Response
5 days
Technical Masterclass
🌐
AppTracker
Browser & App Forensics
5 days
📡
Comms Data Analyzer
Analyzing Communication Data
3–5 days
🔍
Cyber Sleuth
Network & Corporate Investigations
5 days
📝
Document Detective
Analyzing Digital Documents
5 days
🎬
Multimedia Marvel
Multimedia Forensics
5 days
🕵️
Open Source Intel Operative
OSINT Techniques
5 days
Advanced
🎓
Digital Forensics Masterclass
Advanced Technical Challenges
5 days
Presentation
🎤
Evidence Articulator
Communicating Digital Evidence
3–5 days

Download our full course brochure — outlines, dates, pricing, and booking info.

📄 Download Course Brochure (PDF)
🧪 Research
›
Serious science. Sometimes a little ridiculous. Unofficial aim: win an Ig Nobel Prize.
📡
Device Exploitation
Pushing limits of what devices yield. Reverse-engineering edge-case hardware.
💾
Data Recovery
From failing drives to fire-damaged devices. Yes, deliberately.
🌐
OSINT & Intel
Open-source intelligence and dark web research.
💛
Mental Health in DF
Trauma-informed research and advocacy. People matter.
🛠 Tools We've Built
›
Home-built tools, custom forensic software, and bespoke hardware — built in the lab, shaped by casework.
💛 Mental Health in DF
›
We Openly Advocate
Looking After People, Not Just Data
The work of digital forensics can be deeply distressing. We believe mental health is part of professional practice — not something to push aside.
📄 Our Brochures
›
Download our course catalogue or services overview to learn more about what SherFox offers.
📄 Course Brochure (PDF) 📄 Services Brochure (PDF)
Files: sherfox-CPD-brochure.pdf and sherfox-services-brochure.pdf — place in the same folder as this HTML file.
✉ Contact Us
›
📍
ECS Partners Ltd, University of Southampton, University Road, Highfield, Southampton, SO17 1BJ
🦊 SherFox Digital Investigation Labs — Digital Exploitation · Intelligence · Forensics | Part of the University of Southampton, School of Electronics & Computer Science | Engaged & hired through ECS Partners Ltd · SO17 1BJ · (+44) 23 8059 3441 | 🌐 Cyberly | 🦊 CraftyFox | LinkedIn |
Photo Album
1 / 1