Computer

The DFF Exam focuses on the use of FRED (Forensic Recovery of Evidence Device) workstations. It evaluates skills in high-performance forensic processing, multi-drive analysis, memory capture, virtualization, and large-scale investigations. Candidates must demonstrate efficiency, accuracy, and best-practice workflows in lab environments.

This exam certifies hands-on proficiency with AccessData FTK forensic software. Candidates are assessed on case setup, evidence processing, indexing, artifact analysis, email examination, keyword searching, and report generation. The certification demonstrates operational readiness for enterprise and law enforcement investigations using FTK.

The DFE Exam provides foundational validation of digital forensic principles. It covers evidence handling, legal frameworks, forensic imaging, file system basics, artifact identification, and introductory analysis techniques. Designed for beginners and career-transition professionals, it establishes a strong base for further specialization in digital investigations.

The DFA Exam certifies expert-level digital forensic competence across computers, mobile devices, networks, and cloud environments. It focuses on advanced evidence correlation, multi-source timeline construction, memory and malware forensics, encryption challenges, and complex incident reconstruction. Candidates are expected to apply investigative methodologies to high-profile criminal and enterprise cases.

The Cryptocurrency Investigator Exam prepares professionals to investigate blockchain-based financial crimes. Topics include blockchain fundamentals, transaction tracing, wallet identification, exchange attribution, dark web payment analysis, forensic tools for crypto tracking, and regulatory compliance. Candidates must demonstrate the ability to investigate fraud, ransomware payments, money laundering, and illicit crypto activities while preserving evidentiary integrity.

This exam validates advanced mobile forensic skills combined with Python scripting for automation and data analysis. Candidates are tested on Android and iOS file systems, application artifacts, databases, encrypted containers, and system logs. The Python component focuses on scripting for parsing large datasets, automating artifact extraction, correlation, and visualization. The certification is aimed at analysts who want to enhance efficiency and scalability in mobile investigations.

This advanced exam from Digital Intelligence focuses on forensic examination of unmanned aerial systems (UAS). It covers drone hardware architecture, firmware extraction, flight log analysis, GPS telemetry reconstruction, controller synchronization, media artifact recovery, and legal considerations related to drone evidence. Candidates learn to reconstruct flight paths, identify pilot behavior, and attribute ownership or misuse in criminal, regulatory, and intelligence contexts.

The WFE Exam evaluates professional mastery of Windows-based digital forensic investigations. It emphasizes NTFS and FAT file systems, registry analysis, Windows event logs, user activity artifacts, memory analysis, malware trace identification, and system persistence mechanisms. Candidates must demonstrate competence in evidence acquisition, integrity verification, timeline correlation, and investigative reporting. The exam reflects real-world investigative challenges faced by law enforcement, ...

The MCFE Exam offered by DC3 Cyber Training Academy is designed to validate advanced competencies in Macintosh and macOS forensic investigations. The exam covers in-depth macOS architecture, file systems (HFS+, APFS), user artifacts, system logs, Spotlight metadata, Keychain analysis, browser and application artifacts, and encrypted volume handling. Candidates are assessed on forensic acquisition, validation, timeline analysis, incident reconstruction, and courtroom-ready reporting. The certific...

The Introduction to Mobile Devices (IMD) Exam introduces the fundamentals of mobile device technology and forensic relevance. Topics include mobile operating systems, hardware components, data storage, and basic acquisition concepts. This certification serves as a foundational step toward advanced mobile forensic training.