Home Certifications CVFE: Certified Virtualization Forensics Examiner
Response & Recovery

Certified Virtualization Forensics Examiner

Level 400 Advanced

The Virtualization Forensics Examiner course tackles two challenging areas facing IT security professionals today: incident response and virtualization. Forensics is at the heart of incident response, and therefore this training will focus on how to gather evidence relating to an incident – the what, when, where, who and why of an incident. Then, the course will take a deep dive into virtual infrastructure and will allow a clear demonstration of the forensically relevant differences between virtual and physical environments. Finally, this course will use hands-on labs to demonstrate how to examine relevant components of a virtual infrastructure. At the close of this course, you will be able to apply forensically sound best practice techniques within a virtual infrastructure.

The C)VFE is a part of this Role-Based Career Path

Mile2 Certification Roadmap
Electives (400 Level)CSLO

CSLO - Security Leadership Officer


CPSH - Powershell Hacker


CVFE - Virtualization Forensics Examiner


CISSM-LA/LI - Lead Auditor Implementer

A+, Network+, and Security+ are registered trademarks of CompTIA

Key Course Information

Live Class Duration: 5 Days

Language: English

Class Formats:
* Instructor-led

* Self-Study

* Live Virtual Training


* Knowledge in Digital Forensics


* Knowledge in Computer Forensics

Applicable Exams:

* Mile2 C)VFE

CPEs: 40

Course Modules

Module 1 –Digital Forensics –the what, where, when, how and why
Module 2 –Virtual Infrastructure
Module 3 –Forensic Investigation Process
Module 4 –VI Forensics Scenario 1: Identifying direct evidence of a crime
Module 5 –VI Forensics Scenario 2: Attributing Evidence to Specific Requests
Module 6 –VI Forensics Scenario 3: Confirming (or negating) suspect alibis
Module 7 –VI Forensics Scenario 4: Confirming (or negating) suspect statements
Module 8 –VI Forensics Scenario 5: Determining (or negating) suspect intent
Module 9 -VI Forensics Scenario 6: Identifying sources
Module 10 –VI Forensics Scenario 7: Authenticating documents
Module 11 –Putting it all together –Course Summary

Who Should Attend?

* Virtual Infrastructure Specialists
* Forensic Investigators

Upon Completion

Upon completion, Certified Virtualization Forensics Examiner students will have knowledge to perform virtualization forensic examinations. Have knowledge to accurately report on their findings from examinations Be ready to sit for the C)VFE Exam.

Re-Certification Requirements

All Mile2 certifications will be awarded a 3-year expiration date.

There are two requirements to maintain Mile2 certification:

1) Pass the most current version of the exam for your respective existing certification

2) Earn 20 CEUs (Continuing Education Units) per year. You may submit your CEUs in your Mile2 inbox. These CEUs must fall under “Qualify Continuing Educational Activities).

Visit our certification renewal page for more information.

Exam Information

The Certified Security Awareness 2, C)SA2 exam is taken online through Mile2’s Assessment and Certification System (“MACS”), which is accessible on your mile2.com account.

Purchase Options:

Individual Exam Cost – Click Here

Course exams are individually priced.
NOTE: You may purchase the exam without purchasing the course.

Live Class Exam Cost – Click Here

Exam cost is not included with the purchase of a live class.

Ultimate Self-Study Combo Exam Cost – Included

The cost of the exam is included with the purchase of an Ultimate Self-Study Combo.

Course FAQ's

Do I have to purchase a course to buy a certification exam?

NO. You do not have to purchase a course to purchase a certification exam.

Do all Mile2 courses map to a role-based career path?

All of our courses can be taken independently. In order to help guide our students on their cybersecurity career journey we have developed the Mile2 Certification Roadmap. This helpful resource maps specific courses to Role-based career tracks.

What Mile2 Courses/Tracks are Available?

There are over 30 Mile2 courses and certifications. The courses follow Role-Based Career paths in the areas of Foundations, Management, Prevention, Recovery, and Auditing.

Please see our Certification Roadmap for full details.

What Self-Study courses are available?

All of our courses are available as Ultimate Self-Study Combos. The purchase of these courses gives you access to all training videos, materials, exam preps, exam simulators, 1 exam and 1 free 2nd chance exam. The only exception is Red Vs Blue as this course requires multiple participants and is available as a Live Class only.

Are Mile2 courses transferable/shareable?

You cannot transfer, share or give your self- study material to another person. The following is noted when you access your course material through your account. “Important Notice: By accessing the mile2® online course material, practice tests, exams, and related files, the student agrees to the following. I understand that my license to use mile2 electronic course materials is exclusively for my individual professional development. I will not transfer nor will I allow others to use the course materials or the test questions. I will not use any part of this material for teaching others nor will I incorporate it, nor allow it to be incorporated, in any other training materials or publications, electronic or print, without prior specific written consent of mile2®.”