Digital Forensics
Intermediate Online
Available now
eCDFP — Digital Forensics
INEInternationally recognized accreditation body
🧪
Hands-on trainingReal-world labs & simulations
🏅
Internationally accreditedBy global bodies
📝
International examOfficially recognized certificate
🎯
Job-market readyIn-demand skills
About the certification
🔍 Master digital forensic investigation with the eCDFP certification from INE
The eCDFP certification is an advanced professional certification in the field of Digital Forensics, and focuses on developing digital investigation skills and collecting and analyzing evidence from real environments that simulate security incident scenarios within organizations.
Certification content & modules
🧾Principles of digital forensic investigation (10%)
- The life cycle of digital evidence
- Best practices for collecting and preserving evidence
- Ensuring the integrity of Chain of Custody evidence
💻Systems analysis (20%)
- Analysis of Windows and Linux systems
- Extracting the effects of execution.
- Analyze system logs (Logs)
- Track user activity and processes
💾Storage media analysis (20%)
- Analyze file systems and disks
- Recover deleted files
- Metadata analysis
- Examine logical and physical data
🌐Analyzing web evidence (20%)
- Analyze PCAP files
- Track network movement and communications
- Detect suspicious activities
- Link network traffic to security events
- ⏱️ Chronology analysis (20%)
- Build a Timeline for security incidents
- Reconstruct the attacker's steps
- Connect evidence and analyze the sequence of events
📝Preparing criminal reports (10%)
- Document evidence professionally
- Preparing technical and administrative reports
- Providing recommendations to address incidents and prevent their recurrence
👨💻Who is this certificate for?
- Digital Forensics Analysts
- Incident Response Specialists
- SOC Analysts
- Threat Hunters
- Cybersecurity Professionals
- Those working in the fields of DFIR and incident response
What you'll learn
- Basics of digital forensics
- Digital forensics tools
- Storage device basics
- Preserving evidence
Quick details
LevelIntermediate
Delivery MethodOnline
Official certificate information
⏱️
Exam duration
Practical exam with a 24-hour window (30 questions: 15 theoretical + 15 practical)
🎟️
Voucher validity
180 days from date of purchase (both attempts must be submitted before expiration)
🔁
Exam retake
One free retake for failure, must be completed within 14 days of the first attempt
📅
Certificate validity
3 years from the date of grant (renewable)