PECB Certified Lead Forensics Examiner - E-Learning

Summary

This intensive course enables the participants develop the necessary expertise in mastering the Computer. Forensics processes as specified in CLFE certification. Participants will gain a thorough understanding of fundamental computer forensics, based on the best practices used to implement the forensics evidence recovery and analytical processes. The CLFE certification focuses on core skills required to collect and analyze data from Windows, Mac OS X, Linux computer systems, as well as from mobile devices.

Who should attend?

Computer forensic specialists
Electronic data analysts
Specialists in computer search and evidence recovery
Professionals working or interested in law enforcement
Professionals willing to advance their knowledge in computer forensic analysis
Members of an information security team
Expert advisors in information technology
Individuals responsible for examining media to extract and disclose data

Learning objectives

To ensure that the CLFE can protect him or herself against injury, threat to credibility and protect the integrity of the examined media throughout the computer forensics operation
To ensure that the CLFE can conduct a complete computer forensics operation and determine the course of action to be followed in order to achieve the goal of the operation
To ensure that the CLFE can safely handle computers, extract and install peripherals and components, relate the presence of certain ports to the actual or eventual presence of a media containing information to be examined
To ensure that the CLFE has a clear knowledge where the information can be found on an electronic media or bit-stream image of a media, it would be operating the systems or user information, actual deleted or hidden information
To ensure that the CLFE can conduct a forensically sound examination, extraction and preservation of evidence located on a network, in the cloud or in a virtual environment
To ensure that the CLFE can conduct a basic, yet forensically sound examination of a cell phone or tablet
To ensure that the CLFE can use efficiently the tools (software, hardware and supplies) of the field examination kit for a better goal achievement of the computer forensics operation
To ensure that the CLFE can justify the way an artifact was acquired or left behind in an ordered, standard and forensically sound manner

Course Agenda:

Introduction to scientific principles of Computer Forensics operations
The computer and operating structure
Forensics of networks and mobile devices

Computer Forensics tools and methodologies
ANSI Accredited Certification Exam

Examination and certification

The “Certified Lead Forensics Examiner” exam fully meets the requirements of the PECB Examination and Certification Program (ECP). The exam covers the following competence domains:

DOMAIN 1: SCIENTIFIC PRINCIPLES OF COMPUTER FORENSICS

Main Objective: To ensure that the CLFE can protect himself against injury, threat to credibility and protect the integrity of the examined media throughout the computer forensics operation

DOMAIN 2: COMPUTER FORENSICS OPERATIONS FUNDAMENTALS

Main Objective: To ensure that the CLFE can conduct a complete computer forensics operation and determine the course of action to be followed to achieve the goal of the operation

DOMAIN 3: FORENSICS: COMPUTER HARDWARE STRUCTURE

Main Objective: To ensure that the CLFE can safely handle computers, extract and install peripherals and components, relate the presence of certain ports to the actual or eventual presence of a media containing information to be examined

DOMAIN 4: FORENSICS: FORENSICS: OPERATING SYSTEMS AND FILE STRUCTURE

Main Objective: To ensure that the CLFE have a clear knowledge where information can be found on an electronic media or bit-stream image of a media, would it be operating system’s or user information or actual, deleted or hidden information

DOMAIN 5: FORENSICS OF NETWORK, CLOUD AND VIRTUAL ENVIRONMENTS

Main Objective: To ensure that the CLFE can conduct a forensically sound examination, extraction and preservation of evidence located on a network, in the cloud or in a virtual environment

DOMAIN 6: FORENSICS OF CELL PHONES AND TABLETS

Main Objective: To ensure that the CLFE can conduct a basic but forensically sound examination of a cell phone or a tablet

DOMAIN 7: COMPUTER FORENSICS OPERATION TOOLS AND SOFTWARE

Main Objective: To ensure that the CLFE can conduct a basic but forensically sound examination of a cell phone or a tablet

DOMAIN 8: FORENSICS: EXAMINATION, ACQUISITION AND PRESERVATION OF ELECTRONIC EVIDENCE

Main Objective: To ensure that the CLFE can justify the way an artifact was acquired or left behind in an ordered, standard and forensically sound manner

General Information

Certification fees are included in the exam price
Participant manuals contains over 450 pages of information and practical examples
A participation certificate of 31 CPD (Continuing Professional Development) credits will be issued to the participants
In case of failure of the exam, participants are allowed to retake it for free under certain conditions

Price: 4.950,00 Kn + VAT

Contact

ZIH d.o.o., tel: 01/4855-271, 4855-273, fax: 01/4855-272, e-mail: zih@zih.hr

Application