Skip to main content

Description

Digital forensics or computer forensics is a set of methods and techniques designed to identify and collect digital evidence on a computer network or device at the request of a judicial body. The Lead Forensics Examiner is the person in charge of conducting or supervising all investigation procedures within a company or organization's computer network.

The Lead Forensics Examiner training course will teach you to understand and master digital forensics activities in a forensic setting, with best practices linked to the exploitation and protection of evidence. You will also understand the basics of computer forensics, the implementation of evidence recovery processes and analysis techniques. This program focuses on the essential skills required to collect and analyze data from operating systems such as Windows, MAC OS X, Linux, Android and IOS.

Once you've completed this training program, you'll be ready to sit the Lead Forensics Examiner exam. This will enable you to obtain one of the 3 PECB titles, such as Certified Provisional Forensics Examiner, which requires no professional experience. By obtaining certification, you will prove that you have the skills required to carry out forensic analyses, write reports and collect the evidence necessary for the proper conduct of a forensic investigation.

Day 1: Introduction to digital forensics and incident management

  • Presentation of the ISO 27037:2012 standard.
  • Study of scientific and legal approaches to computer forensics.
  • Basics of incident response and computer forensics.
  • Analysis of DoJ and NIST recommended practices.
  • Review of requirements for digital forensics laboratories.

Day 2: Preparing and conducting a digital forensic investigation

  • Definition of a digital forensic investigation.
  • Exploration of investigative processes related to computer crime.
  • Familiarization with common operating systems and file systems.
  • Study of mobile devices in investigations.
  • Maintaining the chain of evidence: policies and procedures to follow.

Day 3: Analysis and management of digital artifacts

  • Comparison of open-source and commercial investigative tools.
  • Identification, acquisition, analysis and communication of digital artifacts.
  • Best practices for using digital investigation tools.
  • Simulation of the various stages involved in digital incidents.

Day 4: Case studies and practical simulations

  • Understanding emerging threats in the digital domain.
  • Presentation of digital forensics results.
  • Presentation of evidence in court.

Day 5: Certification exam

  • Take the three-hour Lead Computer Forensics Examiner certification exam, to validate the skills acquired during training.

This training is intended for the following groups:

  • Computer forensics specialists and consultants.
  • Cybersecurity experts wishing to deepen their skills in digital forensics.
  • Cyber intelligence analysts.
  • Digital evidence recovery professionals.
  • Anyone in the IT sector wishing to gain an insight into the judicial process related to cybercrime.
  • Information technology and security professionals and consultants.
  • Journalists and media critics involved in data extraction and dissemination.

To take the Lead Forensics Examiner course, you need the following prerequisites:

  • a good knowledge of computer forensics is strongly recommended. 

On completion of the Lead Forensics Examiner training course, you will be able to achieve the following objectives:

  • Understanding the issues: Assimilate the challenges of computer forensics and the role of the Lead Computer Forensics Examiner.
  • Knowledge of standards: Master the objectives, standards and standard methodologies for the examination of electronic media.
  • Sequencing of steps: Identify the appropriate sequence of steps to follow in a digital forensics and computer incident investigation.
  • Tool identification: Recognize free and common tools used in digital forensics and incident investigations.
  • Planning skills: Develop the essential skills to effectively plan and execute a digital forensic operation.
  • Security implementation: Know how to implement and maintain a secure network to protect the evidence collected.
  • PECB Certification: Pass the PECB Certified Lead Computer Forensics Examiner to obtain the corresponding certification.

We design, build and support digital products for clients who want to make a positive impact in their industry. Creative with technology, we develop great solutions to help our clients grow and especially by strengthening our relationships based on continuous improvement, maintenance, support and hosting services.

Follow us