Cyber 5W Certified Digital Forensic Analyst (CCDFA) Exam
The exam will be an investigation of a semi-world case using your forensic skills. The exam assumes you have the knowledge and skills that are covered in CDFA. Please note that this is not a Multiple Choice Question (MCQ) exam and requires you to do a full digital forensic investigation, document your findings, and submit a forensics report
Your report will be evaluated by a committee of DFIR professionals
After the report evaluation, you will be asked to meet with the committee to discuss your work and findings
70% is the passing grade to earn you the CCDFA certification
If unfortunately you do not pass, you can retake the exam again after one month from the time of your last exam attempt
- To pass the CCDFA exam, you need to be able to:
- Identify, Acquire, and Validate a Digital Evidence
- Mount and Navigate Case Evidence
- Analyze Files and Work with a Hexadecimal Editor
- Performing Disk Analysis and Fix corrupted disks and volumes
- Analyze NTFS and FAT32 file systems
- Perform data and file carving
- Perform Windows Forensic analysis on Recycle Bin, Thumbnails, LNK Files and Jump Lists
- Locate and analyze System and User Program Execution Artifacts
- Extract Windows Registry files and analyze them to find relevant evidence
- Analyze Volume Shadow Copies & File History
- Analyze Windows Events and Scheduled Tasks
- Document Forensic investigation Findings and Writing a Forensic Report
หมายเหตุ:เนื้อหาในเว็บไซต์นี้มีขึ้นเพื่อวัตถุประสงค์ในการให้ข้อมูลและเพื่อการศึกษาเท่านั้น
* หากมีข้อมูลข้อผิดพลาดประการใด ขออภัยมา ณ ที่นี้ด้วย รบกวนแจ้ง Admin เพื่อแก้ไขต่อไป
ขอบคุณครับ
No comments:
Post a Comment