Successful completion of this exam will demonstrate a candidate's understanding of the process for performing digital forensics. They will demonstrate their knowledge on policies that contain clear statements addressing all major forensic considerations, such as contacting law enforcement, performing monitoring, and conducting regular reviews of forensic policies and procedures. The candidate will be able to demonstrate their ability in operational troubleshooting, log monitoring, data recovery, data acquisition, due diligence/regulatory compliance, collection, examination, analysis, and reporting.
Successful completion of this exam will demonstrate the candidate's ability to conduct the following:
Policy and Procedure Development
Digital Evidence Assessment
Digital Evidence Acquisition
Digital Evidence Examination
Documenting and Reporting
The materials within this course focus on the Knowledge Skills and Abilities (KSAs) identified within the Specialty Areas listed below. Click to view Specialty Area details within the interactive National Cybersecurity Workforce Framework.