ORSYS formation
CONTACT - +33 (0)1 49 07 73 73
CONTACT - 📞 +33 (0)1 49 07 73 73    drapeau francais   drapeau anglais

Consult our trainings :

CLFE, Certified Lead Forensics Examiner, certification Training

Hands-on course
Duration : 5 days
Ref : CLF
Price  2021 : Contact us
  • Program
  • Participants / Prerequisite
  • Intra/Tailored

This five-day intensive course enables the participants to develop the expertise in mastering the computer forensics processes. Participants will gain a thorough understanding of fundamental computer forensics, based on the best practices used to implement the forensics evidence recovery and analytical processes.

Learning objectives

  • To ensure that the CLFE can protect him or herself against injury, threat to credibility
  • To ensure that the CLFE can conduct a complete computer forensics operation
  • To ensure that the CLFE has knowledge where the information can be found on an electronic or bit-stream image of a media
  • To ensure that the CLFE can justify the way an artifact was acquired or left behind in a forensically sound manner


A certificate of " Certified Lead Forensic Examiner" is awarded to participants who have passed the examination and meeting all other requirements for certification.

Introduction to scientific principles of Computer Forensics operations

  • Scientific principles of computer forensics.
  • Introduction to computer forensics process approach.
  • The analysis and implementation of the fundamental operations.
  • Preparation and execution of forensics procedures and operations.

The computer and operating structure

  • Identification and selection of the characteristics of the computer structure.
  • Identification of peripherals and other components.
  • Understanding the operating systems.
  • Extraction and analysis of the file structure.

Forensics of networks and mobile devices

  • Understanding the network, cloud and virtual environments.
  • Generic methods for data examination in a virtual environment.
  • Examination of a cell phone or tablet.
  • Enumeration of cell phones and tablets needed for forensics examination.
  • Storage of information in mobile devices.

Computer Forensics tools and methodologies

  • Enumeration and examination of the computer hardware and software.
  • Determination and testing of corrective measures.
  • Analysis and selection of the best procedures for computer forensics operation.
  • Discovery, documentation and return of the evidence on-site.
  • Analyzing and applying the contextual parameters.

3 hours certification Exam

  • Domain 1: Scientific principles of computer forensics.
  • Domain 2: Computer forensics operations fundamentals.
  • Domain 3: Forensics: computer hardware structure.
  • Domain 4: Forensics: operating systems and file structure.
  • Domain 5: Forensics of network, cloud and virtual environments.
  • Domain 6: Forensics of cell phones and tablets.
  • Domain 7: Computer forensics operation tools and software.
  • Domain 8: Forensics: Examination, acquisition and preservation of electronic evidence of network, cloud and virtual environments.
Participants / Prerequisite

» Participants

Computer Forensic specialists, Professionals working or interested in law enforcement, Members of an information security team, Expert advisors in information technology.

» Prerequisite

Good knowledge in computer and information security.

Contact Informations

By checking this box, I certify that I have read and accepted the conditions for the use of my data regarding the General Data Protection Regulation (GDPR).
You can at any time modify the use of your data and exercise your rights by sending an email to rgpd@orsys.fr
By checking this box, I agree to receive commercial and promotional communications from ORSYS Training*. You can unsubscribe at any time by using the link included in our communications.

Book your place

Submit your request

Time schedule

Generally, courses take place from 9:00 to 12:30 and from 14:00 to 17:30.
However, on the first day attendees are welcomed from 8:45, and there is a presentation of the session between 9:15 and 9:30.
The course itself begins at 9:30. For the 4- or 5-day hands-on courses, the sessions finish at 15:30 on the last day
linkedin orsys
twitter orsys
it! orsys
instagram orsys
pinterest orsys
facebook orsys
youtube orsys