Certified Digital Forensics Examiner

C)DFE Digital Forensics Examiner

The Certified Digital Forensics Examiner, C)DFE certification is designed to train Cyber Crime and Fraud Investigators. Students are taught electronic discovery and advanced investigation techniques.  This course is essential to anyone encountering digital evidence while conducting an investigation.


Mile2’s Certified Digital Forensics Examiner training teaches the
methodology for conducting a computer forensic examination. Students will learn to use forensically sound investigative techniques in order to evaluate the scene, collect and document all relevant information, interview appropriate personnel, maintain chain-of-­custody, and write a findings report.


Through the use of a risk-based approach, the C)DFE is able to implement and maintain cost-effective security controls that are closely aligned with both business and industry standards.

Increase Earnings Mile2 Cyber Security Certification

Annual Salary Potential

The C)DFE is a part of these Role-Based Career Paths

Incident Response Career Path Mile2 Cyber Security Certification


4 Courses to prepare you for INFOSEC Management

Level 200 - C)SP
Level 300 - C)DFE
Level 350 - C)NFE
Level 400 - C)CSA

C)DFE Key Course Information

Live Class Duration: 5 Days

Language: English

Class Formats:
*  Instructor-led

*  Self-Study

*  Live Virtual Training

Suggested Prior Knowledge:

*  1 year experience in computers

* Mile2’s CSP Course or Certification

Applicable Exams:

*  Mile2 C)DFE

CPEs:  40

Who Should Attend

* IS Security Officers
* IS Managers
* Virtualization Engineers and Managers

* Cloud Security Managers

C)DFE Modules

  • Module 1 – Computer Forensic Incidents
  • Module 2 – Investigative Theory
  • Module 3 – Investigative Process
  • Module 4 – Digital Acquisition and Analysis Tools
  • Module 5 – Disks and Storages
  • Module 6 – Live Acquisitions
  • Module 7 – Windows Forensics
  • Module 8 – Linux Forensics
  • Module 9 – Mac Forensics
  • Module 10 – Examination Protocols
  • Module 11– Digital Evidence Protocols
  • Module 12 – Digital Evidence Presentation
  • Module 13– Laboratory Protocols
  • Module 14– Specialized Artifact Recovery
  • Module 15– Advanced Search Strings and File Signatures
  • Module 16– eDiscovery and ESI
  • Module 17– Mobile Forensics
  • Module 18– Incident Handling
  • Module 19– Reporting


  • Lab 1 – Chain of Custody

    Lab 2 – Identify Seized Evidences

    Lab 3 – Devices Acquisition

    Lab 4 – Memory Acquisition

    Lab 5 – Prepare the Case Evidence

    Lab 6 – Investigate the Acquired Evidence

    Lab 7 – Prepare the Case Evidence

    Lab 8 – Windows Event Logs Analysis

    Lab 9 – Linux Primary Info Retrieval

    Lab 10 – Investigate OSX Evidence

    Lab 11 – Finding Clues

    Lab 12 – Construct the Case Events

    Lab 13 -Evidence found from a Seized Android Device

    Lab 14 – Incident Response


Upon Completion

Upon completion, the Certified Digital Forensics Examiner candidate will be able to competently take the CDFE exam.

Re-Certification Requirements

All  Mile2 certifications will be awarded a 3-year expiration date.

There are two requirements to maintain Mile2 certification: 

1)  Pass the most current version of the exam for your respective existing certification

2)  Earn 20 CEUs (Continuing Education Units) per year. You may submit your CEUs in your Mile2 inbox. These CEUs must fall under “Qualify Continuing Educational Activities).

Visit our certification renewal page for more information.

C)DFE Exam Information

The Certified Digital Forensics Examiner exam is taken online through Mile2’s Assessment and Certification System (“MACS”), which is accessible on your account. The exam will take 2 hours and consist of 100 multiple choice questions.

Purchase Options:

Course FAQ's

Do I have to purchase a course to buy a certification exam?

NO.  You do not have to purchase a course to purchase a certification exam.  

Do all Mile2 courses map to a role-based career path?

All of our courses can be taken independently.  In order to help guide our students on their cybersecurity career journey we have developed the Mile2 Certification Roadmap.

This helpful resource maps specific courses to Role-based career tracks.

How to I Access My Exam?

1. Go to

2. Select the “Courses” tab
3. Choose the course name that matches the exam you want to take

4. In the course materials, scroll to the bottom of the page to find the certifiation exam.
5.  See this helpful video:

Cybersecurity Certifications for Today's INFOSEC Careers

Mile2 Cybersecurity Certifications is a world-leader in providing accredited education, training, and certifications for INFOSEC professionals. We strive to deliver the best course ware, the strongest Cyber Range, and the most user-friendly exam system in the market.


Our training courses follow our role-based Certification Roadmap. Plus, many of our classes include hands-on skill development in our Cyber Range.  We train students in penetration testing,disaster recovery, incident handling, and network forensics.  Additionally, our Information Assurance training certification meets military, government, private sector and institutional specifications.  



We've developed training for...

Canada Army Navy Airforce

The Canadian Department of National Defense


The United States Air Force

Defense Logistics Agency

A United States Counterintelligence Agency

Texas Workforce Commission

Texas Workforce Commission

error: Alert: Content is protected !!