This website uses cookies so that we can provide you with the best user experience possible. Cookie information is stored in your browser and performs functions such as recognising you when you return to our website and helping our team to understand which sections of the website you find most interesting and useful.
Certified Digital Forensics Examiner
The Certified Digital Forensics Examiner, C)DFE certification is designed to train Cyber Crime and Fraud Investigators. Students are taught electronic discovery and advanced investigation techniques. This course is essential to anyone encountering digital evidence while conducting an investigation.
Mile2’s Certified Digital Forensics Examiner training teaches the
methodology for conducting a computer forensic examination. Students will learn to use forensically sound investigative techniques in order to evaluate the scene, collect and document all relevant information, interview appropriate personnel, maintain chain-of-custody, and write a findings report.
Through the use of a risk-based approach, the C)DFE is able to implement and maintain cost-effective security controls that are closely aligned with both business and industry standards.
The C)DFE is a part of these Role-Based Career Paths
Forensic Investigator
4 Courses to prepare you for INFOSEC Management
Level 200 - C)SP
Level 300 - C)DFE
Level 350 - C)NFE
Level 400 - C)CSA
Level 200 - C)SP
Level 300 - C)DFE
Level 350 - C)NFE
Level 400 - C)CSA
C)DFE Key Course Information
Live Class Duration: 5 Days
Language: English
Class Formats:
* Instructor-led
* Self-Study
* Live Virtual Training
Suggested Prior Knowledge:
* 1 year experience in computers
* Mile2’s CSP Course or Certification
Applicable Exams:
* Mile2 C)DFE
CPEs: 40
Who Should Attend
* IS Security Officers
* IS Managers
* Virtualization Engineers and Managers
* Cloud Security Managers
C)DFE Modules
- Module 1 – Computer Forensic Incidents
- Module 2 – Investigative Theory
- Module 3 – Investigative Process
- Module 4 – Digital Acquisition and Analysis Tools
- Module 5 – Disks and Storages
- Module 6 – Live Acquisitions
- Module 7 – Windows Forensics
- Module 8 – Linux Forensics
- Module 9 – Mac Forensics
- Module 10 – Examination Protocols
- Module 11– Digital Evidence Protocols
- Module 12 – Digital Evidence Presentation
- Module 13– Laboratory Protocols
- Module 14– Specialized Artifact Recovery
- Module 15– Advanced Search Strings and File Signatures
- Module 16– eDiscovery and ESI
- Module 17– Mobile Forensics
- Module 18– Incident Handling
- Module 19– Reporting
LABS
Lab 1 – Chain of Custody
Lab 2 – Identify Seized Evidences
Lab 3 – Devices Acquisition
Lab 4 – Memory Acquisition
Lab 5 – Prepare the Case Evidence
Lab 6 – Investigate the Acquired Evidence
Lab 7 – Prepare the Case Evidence
Lab 8 – Windows Event Logs Analysis
Lab 9 – Linux Primary Info Retrieval
Lab 10 – Investigate OSX Evidence
Lab 11 – Finding Clues
Lab 12 – Construct the Case Events
Lab 13 -Evidence found from a Seized Android Device
Lab 14 – Incident Response
Accreditations
Upon Completion
Upon completion, the Certified Digital Forensics Examiner candidate will be able to competently take the CDFE exam.
Re-Certification Requirements
All Mile2 certifications will be awarded a 3-year expiration date.
There are two requirements to maintain Mile2 certification:
1) Pass the most current version of the exam for your respective existing certification
2) Earn 20 CEUs (Continuing Education Units) per year. You may submit your CEUs in your Mile2 inbox. These CEUs must fall under “Qualify Continuing Educational Activities).
Visit our certification renewal page for more information.
C)DFE Exam Information
The Certified Digital Forensics Examiner exam is taken online through Mile2’s Assessment and Certification System (“MACS”), which is accessible on your mile2.com account. The exam will take 2 hours and consist of 100 multiple choice questions.
Purchase Options:
Course FAQ's
Do I have to purchase a course to buy a certification exam?
NO. You do not have to purchase a course to purchase a certification exam.
Do all Mile2 courses map to a role-based career path?
All of our courses can be taken independently. In order to help guide our students on their cybersecurity career journey we have developed the Mile2 Certification Roadmap.
This helpful resource maps specific courses to Role-based career tracks.
How to I Access My Exam?
1. Go to mile2.com/my-account
2. Select the “Courses” tab
3. Choose the course name that matches the exam you want to take
4. In the course materials, scroll to the bottom of the page to find the certifiation exam.
5. See this helpful video: