PECB Training & Certification
Home › Courses › Cybersecurity Management › Certified Digital Forensics Examiner (CDFE)
Cybersecurity Management Examiner EN

Certified Digital Forensics Examiner (CDFE)

Master digital forensics at examiner level: acquisition, file system analysis, malware and incident response, with hands-on labs.

5 daysof training
Examinertechnical level
ENlanguage
OfficialPECB exam incl.

Who is this course for?

  • Digital forensics analysts and examiners
  • Incident response (DFIR) team members
  • Security professionals who investigate incidents
  • Experts and consultants who handle digital evidence

What you'll gain

  • The PECB Certified Digital Forensics Examiner (CDFE) credential
  • Hands-on competence in acquiring and analysing digital evidence
  • File system analysis, malware analysis and threat hunting techniques
  • Incident response and advanced forensic analysis methodology

Course programme

Day 1: Foundations of digital forensics
  • Forensic principles and process
  • Evidence acquisition and preservation
Day 2: File system analysis and reverse engineering
  • File systems and artefacts
  • Introduction to reverse engineering
Day 3: Malware analysis and threat hunting
  • Malware analysis
  • Threat hunting
Day 4: Advanced forensic analysis and incident response
  • Advanced forensics
  • Incident response (DFIR)
Day 5: Certification exam
  • Review
  • Official PECB CDFE exam

Exam, credits & certification

Hands-on
Official PECB exam with a practical focus
31 CPD
Continuing Professional Development credits awarded by the course
Included
Exam, marking and first issue of the certification, included in the price

After passing the exam, you can apply for the "PECB Certified Digital Forensics Examiner (CDFE)" credential. The exam includes 2 attempts: the first plus a free retake, usable within the following 12 months. Passing first time is no longer a source of pressure. CPD credits correspond to the level of the course according to PECB. Exam duration is indicative; ask me for the exact details when you enrol.

Who oversees your certification

Ricardo Coronel Lemus, PECB trainer

Ricardo Coronel Lemus

Practising GRC / vCISO consultant · PECB Certified Trainer (CT6496)

More than 20 years in cybersecurity and compliance, today a vCISO and GRC consultant with real clients in France, Spain and Mexico. As the head of RRSG, I oversee every enrolment, guide you through your certification path and coordinate your coaching with a subject-matter expert.

ISO 27001 Lead Auditor / Lead Implementer CISSPCISMCRISCCCISODORA Lead ManagerPCI DSS - PCIP

Not ready to decide? Get all the information by email

I will send you the full syllabus, available dates and the price of Certified Digital Forensics Examiner (CDFE), with no obligation.

Frequently asked questions

Do I need any prerequisites?
A basic understanding of cybersecurity and foundational knowledge of digital forensics are recommended. There is no mandatory formal prerequisite, but this is a technical, examiner-level course.
What language is the exam in?
The material is available in the languages shown and you choose yours when you pay. The exam is offered in several languages and you choose yours when you request it, separately. Coaching is delivered in English to prepare you thoroughly. If you need a specific language, contact us and we will confirm it.
What is the difference between Self-Study and Self-Study + Coaching?
Self-Study includes the official PECB material, the exam and certification, at your own pace. The coaching option adds one-to-one sessions with a subject-matter expert selected by RRSG: real-world case studies and guided exam preparation; they support you until you feel ready to get certified. Ricardo coordinates your coaching and guides you throughout the certification path. The coaching option includes up to 6 hours of one-to-one video sessions, spread at your own pace over the 12 months of access. See the full coaching programme.
What if I don't pass the exam?
The PECB exam includes 2 attempts: the first plus a free retake usable within the following 12 months. So a failure doesn't leave you stranded. What's more, with the coaching option we prepare for the exam together with mock exams so that you arrive confident.
What is it useful for?
Digital forensics is essential in investigations and incident response. This certification attests to hands-on competence to acquire and analyse digital evidence and act on incidents.

Ready to get certified as a Digital Forensics Examiner (CDFE)?

Choose your option above and enrol online. A question or need some advice? Write to me or book a call.

See options and pay Write to me and I will reply