Why should you attend?

Lead Computer Forensics Examiner training enables you to acquire the necessary expertise to perform Computer Forensics processes in order to obtain complete and reliable digital evidence. During this training course, you will also gain a thorough understanding of Computer Forensics fundamentals, based on the best practices used to perform forensics evidence recovery and analytical techniques. This training course is focused on core skills required to collect and analyze data from Windows, Mac OS X, and Linux operating systems, and also from mobile devices.

After mastering all the necessary concepts of Computer Forensics processes, you can sit for the exam and apply for a “PECB Certified Lead Computer Forensics Examiner” credential. By holding a PECB Lead Computer Forensics Examiner Certificate, you will be able to prove that you have the expertise to lead advanced forensic investigations and conduct forensics analysis, reporting, and evidence acquisition. 

Who should attend?

• Computer Forensics specialists
• Computer Forensics consultants
• Cybersecurity professionals
• Cyber intelligence analysts
• Electronic data analysts
• Specialists in computer evidence recovery
• Professionals working or interested in law enforcement
• Professionals seeking to advance their knowledge in Computer Forensics analysis
• Information Security team members
• Information technology expert advisors
• Individuals responsible for examining media to extract and disclose data
• IT Specialists

Course agenda

DAY 1 | Introduction to Incident Response and Computer Forensics concepts

DAY 2 | Prepare and lead a Computer Forensics investigation

DAY 3 | Analysis and management of digital artifacts

DAY 4 | Case Presentation & Trial Simulation 

DAY 5 | Certification exam

Training material

The participant will receive training materials containing more than 450 pages of information and practical examples in electronic form via the KATE application.

Examination

The “PECB Certified Lead Computer Forensics Examiner” exam fully meets the requirements of the PECB Examination and Certification Programme (ECP). The exam covers the following competency domains:

• DOMAIN 1 | Fundamental principles and concepts of Computer Forensics
• DOMAIN 2 | Best practices on Computer Forensics 
• DOMAIN 3 | Digital forensics laboratory requirements
• DOMAIN 4 | Operating system and file system structures
• DOMAIN 5 | Mobile devices
• DOMAIN 6 | Computer crime investigation and forensics examination
• DOMAIN 7 | Maintaining chain of evidence

The exam takes the form of a test consisting of 14 essay questions. It is an open-book exam, where candidates are allowed to use the following reference materials: training course materials, any personal notes taken during the training course, a hard copy dictionary, a hard copy of a standard. The exam lasts 3 hour and can be taken online or in paper form. If you do not pass the exam, you can repeat the exam for free within 12 months.

For specific information about exam type, languages available, and other details, please visit the List of PECB Exams and the PECB Examination Rules and Policies.

Price

The price includes participation in the course, electronic training materials, exam and PECB certification fees. The price of the full-time course also includes a printed copy of the training material, lunch on teaching days and small refreshments.

Certification

After successfully completing the exam, you can apply for the credentials shown on the table below. You will receive a certificate once you comply with all the requirements related to the selected credential. For more information about Computer Forensics certifications and the PECB certification process, please refer to the Certification Rules and Policies.