Certified Lead Forensics Examiner (PECB)

Homepage >

Educations >

All >

Training time:

16.10.2023.

–

20.10.2023.

Purpose

This five-day intensive course enables the participants develop the necessary expertise in mastering the Computer. Forensics processes as specified in CLFE certification. Participants will gain a thorough understanding of fundamental computer forensics, based on the best practices used to implement the forensics evidence recovery and analytical processes. The CLFE certification focuses on core skills required to collect and analyze data from Windows, Mac OS X, Linux computer systems, as well as from mobile devices.

Computer forensic specialists
Electronic data analysts
Specialists in computer search and evidence recovery
Professionals working or interested in law enforcement
Professionals willing to advance their knowledge in computer forensic analysis
Members of an information security team
Expert advisors in information technology
Individuals responsible for examining media to extract and disclose data

Goal

To ensure that the CLFE can protect him or herself against injury, threat to credibility and protect the integrity of the examined media throughout the computer forensics operation
To ensure that the CLFE can conduct a complete computer forensics operation and determine the course of action to be followed in order to achieve the goal of the operation
To ensure that the CLFE can safely handle computers, extract and install peripherals and components, relate the presence of certain ports to the actual or eventual presence of a media containing information to be examined
To ensure that the CLFE has a clear knowledge where the information can be found on an electronic media or bit-stream image of a media, it would be operating the systems or user information, actual deleted or hidden information
To ensure that the CLFE can conduct a forensically sound examination, extraction and preservation of evidence located on a network, in the cloud or in a virtual environment
To ensure that the CLFE can conduct a basic, yet forensically sound examination of a cell phone or tablet
To ensure that the CLFE can use efficiently the tools (software, hardware and supplies) of the field examination kit for a better goal achievement of the computer forensics operation

Content

Day 1: Introduction to scientific principles of Computer Forensics operations

Scientific principles of computer forensics
Introduction to computer forensics process approach
The analysis and implementation of the fundamental operations
Preparation and execution of forensics procedures and operations

Day 2: The computer and operating structure

Identification and selection of the characteristics of the computer structure
Identification of peripherals and other components
Understanding the operating systems
Extraction and analysis of the file structure

Day 3: Forensics of networks and mobile devices

Understanding the network, cloud and virtual environments
Generic methods for data examination in a virtual environment
Examination of a cell phone or tablet
Enumeration of cell phones and tablets needed for forensics examination

Day 4: Computer Forensics tools and methodologies

Enumeration and examination of the computer hardware and software
Determination and testing of corrective measures
Analysis and selection of the best procedures for computer forensics operation
Discovery, documentation and return of the evidence on-site
Analyzing and applying the contextual parameters

Day 5: ANSI Accredited Certification Exam

Exam and certification:

The “Certified Lead Forensics Examiner” exam fully meets the requirements of the PECB Examination and Certification Program (ECP). The exam covers the following competence domains:
- DOMAIN 1: Scientific principles of computer forensics
- DOMAIN 2: Computer forensics operations fundamentals
- DOMAIN 3: Forensics: computer hardware structure
- DOMAIN 4: Forensics: forensics: operating systems and file structure
- DOMAIN 5: Forensics of network, cloud and virtual environments
- DOMAIN 6: Forensics of cell phones and tablets
- DOMAIN 7: Computer forensics operation tools and software
- DOMAIN 8: Forensics: examination, acquisition and preservation of electronic evidence

Izvor: https://pecb.com/en/education-and-certification-for-individuals/computer-forensics/lead-forensics-examiner

Mode of operation

Seminar lasts 5 days.

This training is based on both theory and practice.

The seminar can be conducted: in a classroom format, as online or adapted to the needs of a specific organization (in-house).

Documents proving

All participants receive a participation certificate.

Participant will receive the certificate once he/she comply with all the requirements of this certification.

Lecturers

dr.sc. Silvana Tomić Rotim

Price

1.100,00 EUR+VAT

Exam and certification fees are included in the training price.

Contact

ZIH d.o.o.

tel: 01/4855-271, 4855-273

fax: 01/4855-272

e-mail: zih@zih.hr

Do you want to participate?

Contact us

Fill out the form and our staff will contact you.