Forensic Computer Examiner Certificate

The Certified Computer Forensics Examiner (CCFE) aims to test the basic knowledge and understanding of computer forensics evidence recovery and analysis. Candidates are assessed on their soft and technical skills. During the assessment of soft skills, candidates are required to exhibit fundamental knowledge of legal issues associated with the field of computer forensics. The hard or technical skills of a candidate are checked by a detailed practical examination, which is taken once a candidate clears an online multiple choice exam. Candidates are only given CCFE certification status, when they have passed both online multiple choice exam and practical exam.

Featured Schools

Domains of Certification in Forensic Computer Examiner

Candidates can acquire certification in a number of areas. Major Certified Computer Forensics Examiner (CCFE) domains include computer forensic tools, investigation process, file system forensics, digital device recovery and integrity, evidence analysis and correlation, law, ethics and legal issues, hard disk evidence recovery and integrity, network and volatile memory forensics, evidence recovery of windows-based systems, and report writing.

Forensic Computer Examiner Training

In order to complete forensic computer examiner training, a candidate needs a certain number of hours, which may vary from one institute to another. Besides, there are some other prerequisites that need to be met by the applicant such as basic computer skills, ability to work outside the Windows interface. Forensic examiners usually require data that can’t be easily gathered from Windows, so a candidate should be comfortable working with DOS environment. A forensic computer examiner may need to work with computer hardware as well, so candidates should have the ability to remove and replace hard disk drives from computer and adjust jumper settings. Also, candidates must not have any criminal record to work in this field.

Objectives of Forensic Computer Examiner Training

After Forensic Computer Examiner Training, candidates should have the following knowledge and skills:

Knowledge of exam structure and requirements
Understanding of software licensing and its effect on forensic examiners
Knowledge of forensic ethical standards and their application to forensic examiners
Understanding of how to set up and maintain the physical chain of custody for evidence and media
Knowledge of recovering data from temporary files, swap files, internet cookies, internet cache files, mail files, and internet sites visited
Skills to prevent introduction of virus in the system
Skills to find out document data, including hidden and password protected data
Understanding of how to present recovered data to the client in an effective format

Benefits of certification

There are a number of benefits of acquiring a certification in forensic computer examiner. Skilled professionals, who have proficiency that goes beyond book knowledge, are much more preferable by employers. Certification is a major method for employers to differentiate between the skills levels of different professionals. A certification also indicates commitment of the candidate to the information assurance profession. Besides, a certificate can provide a competitive edge in information security job market. It also provides an opportunity to network with a number of certified individuals.