IDFEInstitute of Digital Forensic Examiners
HomeFree coursesCFX
IDFE-CFXExaminerFree course

Computer Forensic Examiner

Examination of computers and their storage: file systems, operating system artifacts, timelines and the traces users and attackers leave behind.

Modules
7
Length
About 32 h
Pace
Self-paced
Languages
EN · ES · PT

Before you start

Detailed prerequisites are published with the first lessons.

Recommended pathDFFCFXorMFXFRETA recommendation, not a rule: every course and exam is open to anyone, in any order.

Course content

Lessons are in preparation. This is the plan of the course.

  1. 01File systemsExam 20%
  2. 02Windows artifactsExam 25%
  3. 03Timeline analysisExam 15%
  4. 04Browser, email and cloud syncExam 15%
  5. 05Memory and volatile dataExam 10%
  6. 06macOS and Linux essentialsExam 10%
  7. 07Anti-forensicsExam 5%

Who it is for

Examiners and incident responders who analyse disk images of Windows, macOS and Linux systems.

Questions

Is the course really free?

Yes. Every lesson is free to read, with or without an account. You only pay if you decide to take the certification exam.

Do I need the course to take the exam?

No. The exam is independent and open to anyone. The course covers every exam domain, with the weights shown under Course content.

Do I get a certificate for finishing the course?

No. Finishing marks the course as complete in your account. The IDFE-CFX credential comes only from passing the exam.

Which languages is it in?

English, Spanish and Portuguese. Switch at any time with EN · ES · PT at the top of the page.