PECB-CLFE: Certified Lead Forensics Examiner

Lead Computer Forensics Examiner training enables you to acquire the necessary expertise to perform Computer Forensics processes in order to obtain complete and reliable digital evidence. During this training course, you will also gain a thorough understanding of Computer Forensics fundamentals, based on the best practices used to perform forensics evidence recovery and analytical techniques. This training course is focused on core skills required to collect and analyse data from Windows, Mac OS X, and Linux operating systems, and from mobile devices. After mastering all the necessary concepts of Computer Forensics processes, you can sit for the exam and apply for a “PECB Certified Lead Computer Forensics Examiner” credential. By holding a PECB Lead Computer Forensics Examiner Certificate, you will be able to prove that you have the expertise to lead advanced forensic investigations and conduct forensics analysis, reporting, and evidence acquisition.

• Understand the roles and responsibilities of the Lead Computer Forensics examiner during digital forensic investigation.
• Understand the purpose of electronic media examination and its correlation with common standards and methodologies.
• Comprehend the correct sequence of steps of a computer incident investigation and digital forensic operation.
• Understand the common commercial and open-source tools that may be used during incident investigation and digital forensic operations.
• Acquire the necessary competencies to plan and execute a computer forensics operation and also implement and maintain a safety network to protect evidence.

• Forensics specialists
• Computer Forensics consultants
• Cybersecurity professionals
• Cyber intelligence analysts
• Electronic data analysts
• Specialists in computer evidence recovery
• Professionals working or interested in law enforcement.
• Professionals seeking to advance their knowledge in Computer Forensics analysis.
• Information Security team members
• Information technology expert advisors
• Individuals responsible for examining media to extract and disclose data.
• IT Specialists

Module 1: Incident Response and Computer Forensic Concepts

• Course objectives and structure
• Standard and regulatory framework
• Historical aspects of Digital Forensic
• Basic concepts and definitions in ISO 27037
• Overview of ISO 27037 standard
• Roles and responsibility of CLFE
• Computer Forensic Laboratory

Module 2: Prepare and Lead a Computer Forensic Investigation

• Technical fundamentals
• File System Forensic
• Common File Systems
• Common Operating Systems
• Forensic Acquisition

Module 3: Digital Artifacts Analysis and Management

• Digital artifacts: Identify, acquire, analyse, and communicate.
• Using open-source forensic acquisition and analysis tools
• ISO/IEC 27037:2012
• Advanced Keywords searching with Regular Expression

Module 4: Case Presentation & Trial Simulation

• Decision-making of collection or acquisition of potential digital evidence
• Other Essential Digital Forensic Topics
• CLFE Professional Ethics
• Presenting Digital Forensic Findings
• Competence and evaluation of examiners
• Closing the training

Certification Exam