As criminal defense attorneys and civil attorneys encountered law-enforcement examiners, the need for qualified civilian forensic computer examiners grew. Currently, there’s a huge demand for certified, qualified forensic computer examiners. This comprehensive online course prepares you for a career in this emerging field. You’ll learn not only to thoroughly examine digital media, but also to clearly document, control, prepare, and present examination results that will stand up in a court of law. You’ll be able to identify where and how data is stored and how to recover and interpret data and draw appropriate conclusions based on the data. Education on the ethics of computer forensics is also included. This program is hands-on and emphasizes learning by doing. The class is broken down into the following eight sections:
I. Introduction to Computer Forensics
III. File Signatures, Data Formats & Unallocated Space
IV. FAT File System
V. NTFS File System
VI. Registry & Artifacts
VII. Forensic Policy, Case Writing, Legal Process & Forensic Tool Kits
VIII. Introduction to Mobile Data Exploitation
Prerequisites: To enroll in this course, you’ll need to have basic computer skills, including the ability to work outside the Windows GUI interface. This is because forensic examiners often need data that can’t easily be accessed from within Windows. Being comfortable working within the DOS environment will be very helpful in this field. A good measure of your readiness for this program is knowing that you can successfully complete the A+ certification through CompTIA. Note that the certification is by no means a prerequisite. However, the basic knowledge needed for success in this program typically requires that you have the A+ level of experience.A forensic computer examiner will be required to work with the hardware of a computer on many occasions, so you’ll need to have the ability or desire to remove and replace hard-disk drives from computers and change jumper settings. These topics are briefly covered within our program, but you should have these skills prior to enrolling.
To work in this field, you must not have a criminal record. This includes any felony conviction where the individual could have received a sentence of one or more years of imprisonment. This also includes any criminal history of sexually related offenses, as many digital examinations include these topics, and an examiner with this type of history could be easily discredited.
Note: If you plan to pursue the Certified Computer Examiner (CCE) credential, you must have attended a program through an ISFCE Authorized Training Center (such as this one), have documented experience in forensic computer examinations, OR be able to produce a well-documented self-study.
Requirements: This program is compatible with the Windows XP and later operating systems and IE 7 and later browsers. Minimum Computer Requirements: PC with the latest updates and BIOS (Mac computers may not be used) XP, Vista, Windows 7, Windows 8 or Windows 10 operating systems Internet access 1 GB (or more) memory 10 GB or larger hard-disk drive for examination purposes 2 (or more) open USB 2.0 ports Recommended Configuration: PC with the latest updates and BIOS Windows 2000 or XP operating system High-speed Internet access 2 GB (or more) memory 15 GB or larger hard-disk drive for examination purposes Integrated PS/2 ports (not USB keyboard or mouse) 4 open USB 2.0 ports 1 open Firewire/IEEE 1394 port Read/Write blocking device such as the FireFly Read/Write device made by Digital Intelligence You may use either a desktop or a laptop computer. The completion of several practical exercises is a requirement of this program. Some might include floppy diskettes. Although the floppy diskette is no longer commonly encountered in the field, keep in mind that it’s the exercise that is significant, and any action taken on a floppy diskette can be replicated on a hard drive.
Know what a forensic examiner may expect to encounter during an examination.
Understand software licensing and how it affects forensic examiners.
Explore forensic ethical standards as they apply to forensic examiners.
Determine when a legal opinion may be necessary to prevent privacy issues from interfering with the examination or causing a valid lawsuit.
Understand how to properly establish and maintain the physical chain of custody of media and evidence.
Know the significance of, location of, and how to recover data from swap files, temporary files, Internet cache files, Internet cookies, mail files, and Internet sites visited.
Be able to prevent virus introduction and prevent activation of "booby traps."
Understand how to find and document data, including hidden data and password-protected data.
Discover how to present recovered and evidence data to the client in a useful format.
Understand how to present data in court or other proceedings.
Be fully prepared to sit for the CCE Certification testing through the International Society of Forensic Computer Examiners.
The primary certification for civilian forensic computer examiners is the Certified Computer Examiner (CCE) certification. The Forensic Computer Examiner Online Training Program is an authorized ISFCE (International Society of Forensic Computer Examiners) training course that will thoroughly prepare you to take the CCE certification exam.
View the course syllabus
For our online course refund policy, click here.
You will receive a password and log-in information via email within 3-5 business days of registering for this course. Course materials are included and will be mailed to you within 10 business days. You have 12 months to complete this course. You must make a 70 or higher as your final grade to successfully complete the course and receive a certificate of completion. There are no refunds for this course.
If you have questions about this course, please contact the online coordinator at 470-578-3355 or firstname.lastname@example.org.