IT Security C&T
Bookmark and Share
  change font size تصغير الخط تكبير الخط print
Home » Mile2 Training Courses »

CDFE - Certified Digital Forensics Examiner



Course Overview


Digital Forensics is the investigation andrecovery of data contained in digital devices. This data is often the subject of investigations in litigation, proof of guilt, and corrective action in an organiza-tion. When the time comes that you need to investigate your organization, will you have the skill set necessary to gather the digital data that you need? The Certified Digital Forensics Examiner course will benefit organizations, individuals, government offices, and law enforcement agencies in performing these investigations and report-ing their findings.To illustrate, let’s say an employee needs to be terminated for a violation of computer usage rules. To do so the organization must furnish an irrefutable burden of proof based on digital evidence. If not irrefutable, an attorney knowl-edgeable about Digital Forensics could have the case thrown out of court. Government and investigative agencies need proper training to succeed in cases like the above as well as those including acts of fraud, computer mis-use, illegal pornography, counterfeiting, and so forth. A C)DFE is aptly pre-pared to handle these types of situations.



Upon Completion


Students will:

  • Have knowledge to perform digital forensic examinations
  • Have knowledge to accurately report on their findings from examinations
  • Be ready to sit for the C)DFE Exam.


Course History


Computer Forensics as a field was born and developed by U.S. federal law enforcement agents during the mid to late 1980s. New techniques were needed to meet the challenges of white-collar crimes being committed with the assistance of a PC. By 1985 enforcement agents were being trained in the automated environment and by 1989 software and proto-cols were beginning to emerge in the discipline. Mile2 originally had two forensics cours-es: CFED (Computer Forensics and Electronic Discovery) and AFCT (Advanced Foren-sics Computer Techniques). These courses and related materials were created by practi-tioners in the forensics field. In 2008 CFED and AFCT were combined into the CDFE course. Course content and materials are updated regularly to keep up with technology and concepts in the digital forensics field.




About The Author

 Johnny Justice - C)DFE, CEI, CSSA, ECSA, CHFI, Linux+, and CEH


Johnny Justice has been working with computers since 2005. He has been in the U.S. Army for over 13 years working as a Counterintelligence Agent (Computer Forensics, 8 years). He has taught Introduction to UNIX/LINUX, Network Essentials, and Theories and Application / Digital Technology. Johnny has developed courseware and training materials as well as presented these materials in the classroom. Johnny is working with an IT Security company to create an Online Learning Management System that provides training for IT Certifications (i.e. CompTIA, Cisco, Microsoft, ISC2 and Mile2). Johnny holds a variety of certifications: C)DFE, CEI, CSSA, ECSA, CHFI, Linux+, and CEH. He co-authored the 2012 update to the Certified Digital Foren-sics Examiner course and the 2013 Certified Network Forensics Engineer at Mile2. He graduated from American Military University in May 2008 with a Bachelor's of Science degree in Information Technology Management. Also, he graduated Magna Cum-Laude in 2012 from Nova Southeast-ern University with a Master’s of Science degree in Computer Science Education.



Exam Information


The Certified Digital Forensics Examiner exam is taken online through Mile2’s Assess-ment and Certification System (“MACS”), which is accessible on your account. The C)DFE exam will take roughly 2 hours and consist of 100 multiple choice questions. The cost is $300 USD and must be purchased from the store on



Course Content

Module 1: Introduction

Module 2: Computer Forensic Incidents

Module 3: Investigation Process

Module 4: Disk Storage Concepts

Module 5: Digital Acquisition & Analysis

Module 6: Forensic Examination Protocols

Module 7: Digital Evidence Protocols

Module 8: CFI Theory

Module 9: Digital Evidence Presentation

Module 10: Computer Forensic Laboratory Protocols

Module 11: Computer Forensic Processing

Module 12: Digital Forensics Reporting

Module 13: Specialized Artifact Recovery


Module 14: e-Discovery and ESI

Module 15: Cell Phone Forensics

Module 16: USB Forensics

Module 17: Incident Handling

Appendix 1: PDA Forensics

Appendix 2: Investigating Harassment

Lab 1: Preparing Forensic Workstation

Lab 2: Chain of Custody

Lab 3: Imaging Case Evidence / FTK Manager

Lab 4: Reviewing Evidence / Access Data Tools

Review and Exam



Course Title: C)DFE


Duration: 5 days, 40 Hrs

Class Format Options: Instructor-led classroom Live Online Training Computer Based Training

Who Should Attend:

  • Incident Handlers
  • Forensic Auditors
  • Law Enforcement
  • IS Managers

Prerequisite: Experience in using a computer.


Provided Materials:

  • Student Workbook
  • Student Reference Manual
  • Student Lab Guide
  • Software/Tools (DVDs)

Certification Exam:

  • C)DFE: Certified Digital 
  • Forensics Examiner


Certification Track:

C)DFE – Certified Digital Forensics Examiner C)PTE– Certified Pen Test-ing Engineer


C)PTC -- Certified Pen Testing Consultant



Site By