CDFE: Certified Digital Forensics Examiner

Offered by Mile2, this exam trains students on electronic discovery and advanced investigation techniques used in corporate and government settings. It covers the seizure, preservation, and analysis of digital evidence across various operating systems, with a specific focus on maintaining the chain of custody. The curriculum dives into file system structures (FAT, NTFS, EXT), explaining how data is stored and how it can be recovered even after deletion. It is often used by law enforcement and government agencies for procedural training, teaching investigators how to document findings so they remain admissible in court. The exam emphasizes the "live" acquisition of data and the analysis of volatile memory.