The eCDFP designation stands for eLearnSecurity Certified Digital Forensics Professional. eCDFP is the most practical and advanced certification available on the market on digital forensics. By passing the challenging exam and obtaining the eCDFP certificate, a digital forensics investigator can prove their advanced skills in the fast growing area of digital forensics.


Here are some of the ways eLearnSecurity Certified Digital Forensics Professional certification is different from conventional certification:

  • Instead of putting you through a series of theoretical-only multiple-choice questions, you are expected to perform an actual forensic investigation against real-life hosts and disks . This forensic investigation is modeled after real-world scenarios and incidents.
  • Not only do you have to try different various methodologies to conduct a thorough forensic investigation, you will also be asked to prove your critical thinking ability. A skillset like this will make you a valuable asset in the corporate sector.
  • Only individuals who provide proof of their findings in addition to thinking outside the box in this "engagement" are awarded the eCDFP Certification.

Knowledge domains

By obtaining the eCDFP, your skills in the following areas will be assessed and certified:

  • File & disk analysis
  • Windows forensics
  • Network forensics
  • Log analysis
  • Timeline analysis
  • In-depth knowledge of file systems and tools such as WinHex, regripper, tcpdump etc.

The exam

The candidate will be provided with a real world engagement within the renowned Hera Lab: the virtual labs in VPN powered by cutting edge virtualization technology where thousands of security professionals worldwide already practice different kinds of incident response techniques to protect real-world hosts and networks. Once valid credentials have been provided for the certification platform, the candidate will be able to perform the tests from the comfort of their home or office. An Internet connection and VPN software is necessary to carry out the exam.

eLearnSecurity's eCDFP is the only certification for Digital Forensics Investigators that evaluates your abilities at using a variety of forensic techniques, inside a fully featured and real-world environment.

Go to top of page