PECB Certified Lead Forensics Examiner - E-Learning
Summary
This intensive course enables
the participants develop the necessary expertise in mastering the
Computer. Forensics processes as specified in CLFE certification.
Participants will gain a thorough understanding of fundamental computer
forensics, based on the best practices used to implement the forensics evidence
recovery and analytical processes. The CLFE certification focuses on core
skills required to collect and analyze data from Windows, Mac OS X, Linux
computer systems, as well as from mobile devices.
Who should attend?
- Computer forensic specialists
- Electronic data analysts
- Specialists in computer search and
evidence recovery
- Professionals working or interested in
law enforcement
- Professionals willing to advance their
knowledge in computer forensic analysis
- Members of an information security team
- Expert advisors in information
technology
- Individuals responsible for examining
media to extract and disclose data
Learning objectives
- To ensure that the CLFE can protect him
or herself against injury, threat to credibility and protect the integrity of
the examined media throughout the computer forensics operation
- To ensure that the CLFE can conduct a
complete computer forensics operation and determine the course of action to be followed in order to achieve the goal of the operation
- To ensure that the CLFE can safely
handle computers, extract and install peripherals and components, relate
the presence of certain ports to the actual or eventual presence of a
media containing information to be examined
- To ensure that the CLFE has a clear
knowledge where the information can be found on an electronic media or bit-stream image of a media, it would be operating the systems or
user information, actual deleted or hidden information
- To ensure that the CLFE can conduct a
forensically sound examination, extraction and preservation of evidence located on a network, in the cloud or in a virtual
environment
- To ensure that the CLFE can conduct a
basic, yet forensically sound examination of a cell phone or tablet
- To ensure that the CLFE can use
efficiently the tools (software, hardware and supplies) of the field
examination kit for a better goal achievement of the computer
forensics operation
- To ensure that the CLFE can justify the
way an artifact was acquired or left behind in an ordered, standard and forensically sound manner
Course Agenda:
- Introduction to scientific principles of Computer Forensics operations
- The computer and operating
structure
- Forensics of networks and mobile devices
- Computer Forensics tools and methodologies
- ANSI Accredited Certification Exam
Examination and certification
The “Certified Lead Forensics Examiner” exam fully meets the requirements of the PECB Examination and Certification Program (ECP). The exam covers the following competence domains:
- DOMAIN 1: SCIENTIFIC PRINCIPLES OF COMPUTER FORENSICS
Main Objective: To ensure that the CLFE
can protect himself against injury, threat to credibility and protect the integrity of the examined media throughout the computer forensics
operation
- DOMAIN 2: COMPUTER FORENSICS OPERATIONS FUNDAMENTALS
Main Objective: To ensure that the CLFE
can conduct a complete computer forensics operation and determine
the course of action to be followed to achieve the goal of the operation
- DOMAIN 3: FORENSICS: COMPUTER HARDWARE STRUCTURE
Main Objective: To ensure that the CLFE
can safely handle computers, extract and install peripherals
and components, relate the presence of certain ports to the actual or
eventual presence of a media containing information to be examined
- DOMAIN 4: FORENSICS: FORENSICS: OPERATING SYSTEMS AND FILE
STRUCTURE
Main Objective: To ensure that the CLFE
have a clear knowledge where information can be found on an
electronic media or bit-stream image of a media, would it be operating
system’s or user information or actual, deleted or hidden information
- DOMAIN 5: FORENSICS OF NETWORK, CLOUD AND VIRTUAL
ENVIRONMENTS
Main Objective: To ensure that the CLFE
can conduct a forensically sound examination, extraction and preservation
of evidence located on a network, in the cloud or in a virtual environment
- DOMAIN 6: FORENSICS OF CELL PHONES AND TABLETS
Main Objective: To ensure that the CLFE
can conduct a basic but forensically sound examination of a cell phone or
a tablet
- DOMAIN 7: COMPUTER FORENSICS OPERATION TOOLS AND
SOFTWARE
Main Objective: To ensure that the CLFE
can conduct a basic but forensically sound examination of a cell phone or
a tablet
- DOMAIN 8: FORENSICS: EXAMINATION, ACQUISITION AND
PRESERVATION OF ELECTRONIC EVIDENCE
Main Objective: To ensure that the CLFE can justify the way an artifact was acquired or left behind in an ordered, standard and forensically sound manner
General Information
- Certification fees are included in the
exam price
- Participant manuals contains over 450
pages of information and practical examples
- A participation certificate of 31 CPD
(Continuing Professional Development) credits will be issued to the
participants
- In case of failure of the exam, participants
are allowed to retake it for free under certain conditions
Price: 4.950,00 Kn + VAT
Contact
ZIH d.o.o., tel: 01/4855-271, 4855-273, fax: 01/4855-272, e-mail: zih@zih.hr
Application