Lead Computer Forensics Examiner training enables you to acquire the necessary expertise to perform Computer Forensics processes in order to obtain complete and reliable digital evidence. During this training course, you will also gain a thorough understanding of Computer Forensics fundamentals, based on the best practices used to perform forensics evidence recovery and analytical techniques. This training course is focused on core skills required to collect and analyze data from Windows, Mac OS X, and Linux operating systems, and also from mobile devices.
Lead Computer Forensics Examiner training enables you to acquire the necessary expertise to perform Computer Forensics processes in order to obtain complete and reliable digital evidence. During this training course, you will also gain a thorough understanding of Computer Forensics fundamentals, based on the best practices used to perform forensics evidence recovery and analytical techniques. This training course is focused on core skills required to collect and analyze data from Windows, Mac OS X, and Linux operating systems, and also from mobile devices.
After mastering all the necessary concepts of Computer Forensics processes, you can sit for the exam and apply for a “PECB Certified Lead Computer Forensics Examiner” credential. By holding a PECB Lead Computer Forensics Examiner Certificate, you will be able to prove that you have the expertise to lead advanced forensic investigations and conduct forensics analysis, reporting, and evidence acquisition.
Who should attend?
Computer Forensics specialists
Computer Forensics consultants
Cybersecurity professionals
Cyber intelligence analysts
Electronic data analysts
Specialists in computer evidence recovery
Professionals working or interested in law enforcement
Professionals seeking to advance their knowledge in Computer Forensics analysis
Information Security team members
Information technology expert advisors
Individuals responsible for examining media to extract and disclose data
IT Specialists
Learning objectives
Understand the roles and responsibilities of the Lead Computer Forensics examiner during digital forensic investigation
Understand the purpose of electronic media examination and its correlation with common standards and methodologies
Comprehend the correct sequence of steps of a computer incident investigation and digital forensic operation
Understand the common commercial and open source tools that may be used during incident investigation and digital forensic operations
Acquire the necessary competencies to plan and execute a computer forensics operation and also implement and maintain a safety network to protect evidence
Educational approach
This training is based on both theory and best practices used in Computer Forensics
Lecture sessions are illustrated with examples based on case studies
Practical exercises are based on a case study which includes role playing and discussions
Practice tests are similar to the Certification Exam
Prerequisites
Knowledge on Computer Forensics.
More Details
Course Agenda
Day 1: Introduction to Incident Response and Computer Forensics concepts
Day 2: Prepare and lead a Computer Forensics investigation
Day 3: Analysis and management of digital artefacts
Day 4: Case Presentation & Trial Simulation
Day 5: Certification Exam
Examination
The “PECB Certified Lead Computer Forensics Examiner” exam fully meets the requirements of the PECB Examination and Certification Programme (ECP). The exam covers the following competency domains:
Domain 1: Fundamental principles and concepts of Computer Forensics
Domain 2: Best practices on Computer Forensics
Domain 3: Digital forensics laboratory requirements
Domain 4: Operating system and file system structures
Domain 5: Mobile devices
Domain 6: Computer crime investigation and forensics examination
Domain 7: Maintaining chain of evidence
Certification
After successfully completing the exam, you can apply for the credentials shown on the table below. You will receive a certificate once you comply with all the requirements related to the selected credential. For more information about Computer Forensics certifications and the PECB certification process, please refer to the Certification Rules and Policies.
The requirements for PECB Computer Forensics Examiner Certifications are:
Credential
Exam
Professional experience
CFMS project experience
Other requirements
PECB Certified Provisional Forensics Examiner
PECB Certified Lead Forensics Examiner Exam or equivalent
None
None
Signing the PECB Code of Ethics
PECB Certified Forensics Examiner
PECB Certified Lead Forensics Examiner Exam or equivalent
Two years: One year of field experience in computer forensics
Forensics activities totaling 200 hours
Signing the PECB code of ethics
PECB Certified Lead Forensics Examiner
PECB Certified Lead Forensics Examiner Exam or equivalent
Five years: Two years of field experience in computer forensics
Forensics activities totaling 300 hours
Signing the PECB code of ethics
To be considered valid, these computer forensics activities should follow best implementation practices and include the following:
Conducting forensic investigation
Post incident response activities
Network management
Computer forensics examination and analysis planning
Analysis of file systems and digital media
Forensics analysis of operating systems and networks
Forensics analysis of computer and mobile devices
Gathering digital evidence
General Information
Certification and examination fees are included in the price of the training course
Training material containing over 450 pages of information and practical examples will be distributed
An attestation of course completion worth 31 CPD (Continuing Professional Development) credits will be issued to the participants who have attended the training course.
In case of exam failure, you can retake the exam within 12 months for free