The Certified Digital Forensics Examiner, C)DFE certification is designed to train Cyber Crime and Fraud Investigators. Students are taught electronic discovery and advanced investigation techniques. This course is essential to anyone encountering digital evidence while conducting an investigation.
Mile2’s Certified Digital Forensics Examiner training teaches the
methodology for conducting a computer forensic examination. Students will learn to use forensically sound investigative techniques in order to evaluate the scene, collect and document all relevant information, interview appropriate personnel, maintain chain-of-custody, and write a findings report.
Through the use of a risk-based approach, the C)DFE is able to implement and maintain cost-effective security controls that are closely aligned with both business and industry standards.
C)DFE
Key Course Information
Live Class Duration: 5 Days
Language: English
Class Formats:
* Instructor-led
* Self-Study
* Live Virtual Training
Suggested Prior Knowledge:
* 1 year experience in computers
* Mile2’s CSP Course or Certification
Applicable Exams:
* Mile2 C)DFE
CPEs: 40
Who Should Attend?
- IS Security Officers
- IS Managers
- Virtualization Engineers and Managers
- Cloud Security Managers
C)DFE
Modules
- Module 1 – Computer Forensic Incidents
- Module 2 – Investigative Theory
- Module 3 – Investigative Process
- Module 4 – Digital Acquisition and Analysis Tools
- Module 5 – Disks and Storages
- Module 6 – Live Acquisitions
- Module 7 – Windows Forensics
- Module 8 – Linux Forensics
- Module 9 – Mac Forensics
- Module 10 – Examination Protocols
- Module 11– Digital Evidence Protocols
- Module 12 – Digital Evidence Presentation
- Module 13– Laboratory Protocols
- Module 14– Specialized Artifact Recovery
- Module 15– Advanced Search Strings and File Signatures
- Module 16– eDiscovery and ESI
- Module 17– Mobile Forensics
- Module 18– Incident Handling
- Module 19– Reporting
Labs
- Lab 1 – Chain of Custody
- Lab 2 – Identify Seized Evidences
- Lab 3 – Devices Acquisition
- Lab 4 – Memory Acquisition
- Lab 5 – Prepare the Case Evidence
- Lab 6 – Investigate the Acquired Evidence
- Lab 7 – Prepare the Case Evidence
- Lab 8 – Windows Event Logs Analysis
- Lab 9 – Linux Primary Info Retrieval
- Lab 10 – Investigate OSX Evidence
- Lab 11 – Finding Clues
- Lab 12 – Construct the Case Events
- Lab 13 -Evidence found from a Seized Android Device
- Lab 14 – Incident Response
Accreditations
Upon Completion
Upon completion, the Certified Digital Forensics Examiner candidate will be able to competently take the CDFE exam.
Re-Certification Requirements
All Mile2 certifications will be awarded a 3-year expiration date.
There are two requirements to maintain Mile2 certification:
1) Pass the most current version of the exam for your respective existing certification.
2) Earn 20 CEUs (Continuing Education Units) per year. You may submit your CEUs in your Mile2 inbox. These CEUs must fall under “Qualify Continuing Educational Activities.
Visit our certification renewal page for more information.
C)DFE Exam Information
The Certified Digital Forensics Examiner exam is taken online through Mile2’s Assessment and Certification System (“MACS”), which is accessible on your mile2.com account. The exam will take 2 hours and consist of 100 multiple choice questions.
Purchase Options :
Individual Exam Cost - Click Here
Course exams are individually priced. NOTE: You may purchase the exam without purchasing the course.
Live class exam cost- Click Here
Exam cost is not included with the purchase of a live class.
Ultimate Self-Study Combo Exam Cost Included.
The cost of the exam is included with purchase of an Ultimate self-study combo.
Course FAQs
No
All of our courses can be taken independently. In order to help guide our students on their cybersecurity career journey we have developed the Mile2 Certification Roadmap.
This helpful resource maps specific courses to Role-based career tracks.
1. Go to mile2.com/my-account
2. Select the “Courses” tab
3. Choose the course name that matches the exam you want to take
4. In the course materials, scroll to the bottom of the page to find the certifiation exam.