HomeCoursesCybersecurity Management › Certified Digital Forensics Examiner (CDFE)
Cybersecurity Management Examiner EN

Certified Digital Forensics Examiner (CDFE)

Master digital forensics at examiner level: acquisition, file system analysis, malware and incident response, with hands-on labs.

5 daysof training
Examinertechnical level
ENlanguage
OfficialPECB exam incl.

Who is this course for?

  • Digital forensics analysts and examiners
  • Incident response (DFIR) team members
  • Security professionals who investigate incidents
  • Experts and consultants who handle digital evidence

What you'll gain

  • The PECB Certified Digital Forensics Examiner (CDFE) credential
  • Hands-on competence in acquiring and analysing digital evidence
  • File system analysis, malware analysis and threat hunting techniques
  • Incident response and advanced forensic analysis methodology

Course programme

Day 1: Foundations of digital forensics
  • Forensic principles and process
  • Evidence acquisition and preservation
Day 2: File system analysis and reverse engineering
  • File systems and artefacts
  • Introduction to reverse engineering
Day 3: Malware analysis and threat hunting
  • Malware analysis
  • Threat hunting
Day 4: Advanced forensic analysis and incident response
  • Advanced forensics
  • Incident response (DFIR)
Day 5: Certification exam
  • Review
  • Official PECB CDFE exam

Exam, credits & certification

Hands-on
Official PECB exam with a practical focus
31 CPD
Continuing Professional Development credits awarded by the course
Included
Exam, marking and first issue of the certification, included in the price

After passing the exam, you can apply for the "PECB Certified Digital Forensics Examiner (CDFE)" credential. The exam includes 2 attempts: the first plus a free retake, usable within the following 12 months. Passing first time is no longer a source of pressure. CPD credits correspond to the level of the course according to PECB. Exam duration is indicative; ask me for the exact details when you enrol.

Your trainer

Ricardo Coronel Lemus, PECB trainer

Ricardo Coronel Lemus

Practising GRC / vCISO consultant · PECB Certified Trainer (CT6496)

Over 20 years in cybersecurity and compliance, today a vCISO and GRC consultant with real clients in France, Spain and Mexico. I don't approach standards theoretically: I apply them day to day with real clients: that's what I bring to my coaching and exam preparation.

ISO 27001 Lead Auditor / Lead Implementer CISSPCISMCRISCCCISODORA Lead ManagerPCI DSS - PCIP

Frequently asked questions

Do I need any prerequisites?
A basic understanding of cybersecurity and foundational knowledge of digital forensics are recommended. There is no mandatory formal prerequisite, but this is a technical, examiner-level course.
What language is the exam in?
The official PECB exam for this course is available in English. Coaching is delivered in English to prepare you as well as possible.
What is the difference between Self-Study and Self-Study + Coaching?
Self-Study gives you the official material, the exam and the certification so you can progress at your own pace. The coaching option adds one-to-one sessions with me, real-world case studies and guided exam preparation: I support you until you feel ready to certify.
What if I don't pass the exam?
The PECB exam includes 2 attempts: the first plus a free retake usable within the following 12 months. So a failure doesn't leave you stranded. What's more, with the coaching option we prepare for the exam together with mock exams so that you arrive confident.
What is it useful for?
Digital forensics is essential in investigations and incident response. This certification attests to hands-on competence to acquire and analyse digital evidence and act on incidents.

Ready to get certified as a Digital Forensics Examiner (CDFE)?

Choose your option above and enrol online. A question or need some advice? Write to me or book a call.