• Online, Instructor-Led
  • Online, Self-Paced
Course Description

Lead Computer Forensics Examiner training enables you to acquire the necessary expertise to perform Computer Forensics processes in order to obtain complete and reliable digital evidence. During this training course, you will also gain a thorough understanding of Computer Forensics fundamentals, based on the best practices used to perform forensics evidence recovery and analytical techniques. This training course is focused on core skills required to collect and analyze data from Windows, Mac OS X, and Linux operating systems, and also from mobile devices.

Learning Objectives

Understand the roles and responsibilities of the lead forensic examiner during digital forensic investigation. Understand the purpose of electronic media examination and its relation with common standards and methodologies. Understand the correct sequence of steps of a computer related incident investigation and digital forensic operation. Understand common commercial and open source tools that may be used during computer incident investigation and digital forensic operation.

Framework Connections

The materials within this course focus on the NICE Framework Task, Knowledge, and Skill statements identified within the indicated NICE Framework component(s):

Specialty Areas

  • Digital Forensics
  • Test and Evaluation
  • Threat Analysis
  • Vulnerability Assessment and Management
  • Cyber Investigation

Feedback

If you would like to provide feedback for this course, please e-mail the NICCS SO at NICCS@hq.dhs.gov.