Duration
5 days
Why should you attend?
Lead Computer Forensics Examiner training enables you to acquire the necessary expertise to perform Computer Forensics processes in order to obtain complete and reliable digital evidence. During this training course, you will also gain a thorough understanding of Computer Forensics fundamentals, based on the best practices used to perform forensics evidence recovery and analytical techniques. This training course is focused on core skills required to collect and analyze data from Windows, Mac OS X, and Linux operating systems, and also from mobile devices.
After mastering all the necessary concepts of Computer Forensics processes, you can sit for the exam and apply for a “PECB Certified Lead Computer Forensics Examiner” credential. By holding a PECB Lead Computer Forensics Examiner Certificate, you will be able to prove that you have the expertise to lead advanced forensic investigations and conduct forensics analysis, reporting, and evidence acquisition.
Who should attend?
- Computer Forensics specialists
- Computer Forensics consultants
- Cybersecurity professionals
- Cyber intelligence analysts
- Electronic data analysts
- Specialists in computer evidence recovery
- Professionals working or interested in law enforcement
- Professionals seeking to advance their knowledge in Computer Forensics analysis
- Information Security team members
- Information technology expert advisors
- Individuals responsible for examining media to extract and disclose data
- IT Specialists
Course Agenda
Day 1 Introduction to Incident Response and Computer Forensics concepts
- Exploring the ISO 27037
- Scientific and legal principles of computer forensics
- Fundamentals of incident response and computer forensic operations
- Exploring best practices mentioned in various DoJ and NIST guidelines
- Computer Forensics Lab requirements
Day 2 Prepare and lead a Computer Forensics investigation
- Computer crime investigation and digital forensics
- Common operating system and file system structures
- Mobile devices
- Maintaining chain of evidence
- Policies and procedures to maintain chain of evidence
Day 3 Analysis and management of digital artifacts
- Introduction to open source and commercial tools
- Identifying, acquiring, analyzing and communicating digital artifacts
- Using open source forensics and analysis tools
- Incident simulation
Day 4 Case Presentation & Trial Simulation
- Emerging threats
- Presenting digital forensic findings
- Presenting the evidence in court
Learning objectives
- Understand the roles and responsibilities of the Lead Computer Forensics examiner during digital forensic investigation
- Understand the purpose of electronic media examination and its correlation with common standards and methodologies
- Comprehend the correct sequence of steps of a computer incident investigation and digital forensic operation
- Understand the common commercial and open source tools that may be used during incident investigation and digital forensic operations
- Acquire the necessary competencies to plan and execute a computer forensics operation and also implement and maintain a safety network to protect evidence
Examination (3 hours)
The “PECB Certified Lead Computer Forensics Examiner” exam fully meets the requirements of the PECB Examination and Certification Programme (ECP). The exam covers the following competency domains:
Domain 1 Fundamental principles and concepts of Computer Forensics
Domain 2 Best practices on Computer Forensics
Domain 3 Digital forensics laboratory requirements
Domain 4 Operating system and file system structures
Domain 5 Mobile devices
Domain 6 Computer crime investigation and forensics examination
Domain 7 Maintaining chain of evidence
Certification
After successfully completing the exam, you can apply for the credentials shown on the table below
You will receive a certificate once you comply with all the requirements related to the selected credential
Credential
Exam
Professional experience
CF
experience
Other requirements
PECB Certified Provisional Computer Forensics Examiner
PECB Certified Lead Computer Forensics Examiner exam
or equivalent
None
Signing the PECB
Code of Ethics
PECB Certified Computer Forensics Examiner
PECB Certified Lead Computer Forensics Examiner exam
or equivalent
Two years: One year of work experience in Computer Forensics
Computer Forensics activities: a total of 200 hours
Signing the PECB
PECB Certified Lead Computer Forensics Examiner
PECB Certified Lead Computer Forensics Examiner exam
or equivalent
Five years: Two years of work experience in Computer Forensics
Code of Ethics
General information
- Certification fees are included on the exam price
- Training material containing over 450 pages of information and practical examples will be distributed
- A participation certificate of 31 CPD (Continuing Professional Development) credits will be issued
- In case of exam failure, you can retake the exam within 12 months for free
Programme scope, delivery arrangements and suitability are confirmed during enquiry.