Certification name: ICSI | CDFE Certified Digital Forensics Examiner
Overview:
ICSI | Certified Digital Forensics Examiner certification confirms the holder’s ability to conduct computer forensic analysis of Windows computer systems.
Topics covered:
- Memory forensics and timeline analysis
- Log file analysis, email analysis and file analysis
- Registry analysis, timestamp analysis and network file analysis
Who will benefit from this course:
- Incident response team members
- Information security professionals
- Digital forensic analysts
Exam certification objectives:
After the successful completion of the exam, students will be able to understand and where applicable apply the following:
- Log File Analysis: Analyse a series of timestamps for events in a Windows event log.
- Email Header Analysis: Examine email headers and identify information contained in them.
- Memory Analysis: Analyse and identify various data from captured memory files.
- Registry File Analysis: Analyse offline registry files and identify critical data.
- File Hashing for Validation: Calculate hashes of individual files and folders for validation.
- Web Browser Analysis: Analyse internet cache and history files from web browsers to identify websites the user visited.
- File Analysis: Identify metadata stored in Microsoft Office files and digital photos.
- Timestamp and Timeline Analysis: Analyse a series of timestamps related to different events, such as creating a Microsoft Office file.
- JumpList Analysis: Analyse a series of jumplists and extract valuable information.
- Thumbnail Analysis: Analyse thumbnails and extract information such as timestamps and file names.
- Password Recovery: Crack password hashes extracted from a Windows operating system.
- Network File Analysis: Use Wireshark and extract information from captured network packets. Such information includes source, destination ports and IP addresses.
Exam Details:
Exam code: CDFE
Number of questions: 50
Type of questions: Performance-based multiple choice
Test duration: 2 Hours
Passing score: 70%
Language: English
Exam provider:
All ICSI Certification exams are web-based and required to be remote proctored through ProctorU.
Cost: GBP 200
Renewal:
Every three years