Computer Forensics - Foundation


This course enables the participants to learn about the best practices for implementing and managing Computer Forensics processes as specified in the forensics certification. Participants will gain a basic understanding of fundamental computer forensics used to implement the forensics evidence recovery and analytical processes..



Who should attend?

  • Members of a Computer Forensics team
  • Computer Forensics Professionals wanting to gain a comprehensive knowledge of the main processes of Computer Forensics
  • Staff involved in the implementation of Computer Forensics
  • Technicians involved in operations related to Computer Forensics


Learning objectives

  • To understand the implementation of a Computer Forensics process
  • To understand the relationship between Computer Forensics and the compliance with the requirements of different stakeholders in an organization
  • To know the concepts, approaches, standards, methods and techniques allowing to effectively manage a Computer Forensics process
  • To acquire the necessary Knowledge to contribute in implementing Computer Forensics processes


Course Agenda

Day 1: Introduction to Computer Forensics

  • Introduction to the main concepts of Computer Forensics
  • Introduction to management systems and the process approach
  • Fundamental principles of Computer Forensics
  • Implementation phases of a Computer Forensics framework
  • Continual improvement of a Computer Forensics process

Day 2: Implementing Computer Forensics controls

  • Principles and design of Computer Forensics controls
  • Documentation of a Computer Forensics environment
  • Monitoring and reviewing the Computer Forensics controls
  • Examples of  implementation of Computer Forensics controls based on best practices

Day 3: Certification Exam






Educational approach

  • This training is based on both theory and practice:
    • Sessions of lectures illustrated with examples based on real cases
    • Review exercises to assist the exam preparation
    • Practice test similar to the certification exam
  • To benefit from the practical exercises, the number of training participants is limited

Examination and Certification

  • The “PECB Certified Lead Forensics Foundation” exam fully meets the requirements of the PECB Examination and Certification Programme (ECP). The exam covers the following competence domains:
    • Domain 1: Fundamental principles and concepts of Computer Forensics
    • Domain 2: Implementation of a Computer Forensics process
  • The “PECB Certified Lead Forensics Foundation” exam is available in different languages (the complete list of languages can be found in the examination application form)
  • Duration: 1 hour
  • For more information about the exam, refer to PECB section on PECB Certified Lead Forensics Foundation
  • A certificate of “PECB Certified Lead Forensics Foundation” will be issued to participants who successfully passed the exam and comply with all the other requirements related to this credential

 General Information

  • Certification fees are included in the exam price
  • A student manual containing over 200 pages of information and practical examples will be distributed to participants
  • A participation certificate of 14 CPD (Continuing Professional Development) credits will be issued to participant
  • In case of failure of the exam, participants are allowed to retake the exam for free under certain conditions