Skip to main content

eDiscovery Certification Council

Professional Training Course • Vendor-Neutral • Self-Paced Online

Certified eDiscovery & Forensic Investigation Practitioner (CEFIP)

Develop hands-on knowledge across the full digital-evidence lifecycle, from forensic acquisition through defensible discovery production.

Course Details

This page shows the course fee only. No exam-voucher purchase option is included.

Duration 5 Hours and 50 Mins
Exam Language English
Exam Expiration 1 Year from Purchase
Study Guide eCourseware / Self-paced online

Detailed Course Outline

The course covers the subject areas below, based on the detailed curriculum published for this programme.

Course Overview

  • Overview of Digital Forensics: definition, history and evolution

1 – Introduction to Digital Forensics and eDiscovery

  • eDiscovery role in legal and compliance processes
  • Differences and synergies between digital forensics and eDiscovery
  • Importance of digital evidence in modern investigations
  • Real-world cybercrime and litigation case studies
  • Quiz

2 – Legal and Ethical Frameworks

  • Key laws and regulations
  • Legal admissibility of digital evidence
  • Ethical considerations
  • Cross-border investigations
  • Compliance obligations
  • Risk management
  • Quiz

3 – The Digital Forensics Investigation Process

  • Phases of investigation
  • Incident-response basics
  • Forensic readiness
  • Case management
  • Forensic documentation
  • Contingency planning
  • Quiz

4 – Data Acquisition and Preservation

  • Types of data acquisition
  • Protection techniques
  • Imaging methods
  • Sanitization and validation
  • Metadata preservation
  • Legal holds
  • Quiz

5 – File Systems and Storage Media

  • File systems
  • Forensic value of disk structure
  • RAID, NAS and SAN forensics
  • Cloud storage
  • Encoding standards
  • Data carving
  • Quiz

6 – Forensic Analysis Techniques

  • Keyword searching
  • Timeline analysis
  • Browser forensics
  • Hash analysis
  • Pattern recognition
  • Steganography detection
  • Quiz

7 – Operating System Forensics

  • Windows forensics overview
  • Linux forensics
  • macOS forensics
  • Booting processes
  • Memory forensics
  • Cross-platform tools
  • Quiz

8 – Network and Email Forensics

  • Network protocols
  • Log analysis
  • Email forensics
  • Web-application investigations
  • Wireless forensics
  • Dark-web forensics
  • Quiz

9 – Mobile and IoT Forensics

  • Mobile-device overview
  • Mobile data extraction
  • App forensics
  • GPS and location data
  • IoT forensics
  • SIM and cellular forensics
  • Quiz

10 – Malware and Advanced Threat Forensics

  • Malware types
  • Static malware analysis
  • Dynamic malware analysis
  • Anti-forensic techniques
  • APT investigations
  • Incident-response integration
  • Quiz

11 – eDiscovery Processes and Tools

  • eDiscovery workflow
  • Data mapping
  • ESI processing
  • TAR and predictive coding
  • Cost containment
  • Load-file creation
  • Quiz

12 – Forensic Tools and Technologies

  • Open-source tools
  • Commercial tools
  • eDiscovery platforms
  • Hardware tools
  • Tool validation
  • AI in forensics
  • Quiz

13 – Database and Specialized Forensics

  • Database forensics
  • Multimedia forensics
  • Social media forensics
  • Vehicle and drone forensics
  • Financial forensics
  • OSINT integration
  • Quiz

14 – Reporting, Presentation and Courtroom Skills

  • Report writing
  • Expert testimony
  • Visual aids
  • Cross-examination
  • Continuous professional development
  • Quiz

Ready to start the CEFIP training course?

Course fee: $149 • Self-paced online eCourseware

Purchase CEFIP Course