Response & Recovery
Certified Virtualization Forensics Examiner
Level 400 Advanced
The Virtualization Forensics Examiner course tackles two challenging areas facing IT security professionals today: incident response and virtualization. Forensics is at the heart of incident response, and therefore this training will focus on how to gather evidence relating to an incident – the what, when, where, who and why of an incident. Then, the course will take a deep dive into virtual infrastructure and will allow a clear demonstration of the forensically relevant differences between virtual and physical environments. Finally, this course will use hands-on labs to demonstrate how to examine relevant components of a virtual infrastructure. At the close of this course, you will be able to apply forensically sound best practice techniques within a virtual infrastructure.
A+, Network+, and Security+ are registered trademarks of CompTIA
Key Course Information
Live Class Duration: 5 Days
* Live Virtual Training
* Knowledge in Digital Forensics
* Knowledge in Computer Forensics
* Mile2 C)VFE
Module 1 –Digital Forensics –the what, where, when, how and why
Module 2 –Virtual Infrastructure
Module 3 –Forensic Investigation Process
Module 4 –VI Forensics Scenario 1: Identifying direct evidence of a crime
Module 5 –VI Forensics Scenario 2: Attributing Evidence to Specific Requests
Module 6 –VI Forensics Scenario 3: Confirming (or negating) suspect alibis
Module 7 –VI Forensics Scenario 4: Confirming (or negating) suspect statements
Module 8 –VI Forensics Scenario 5: Determining (or negating) suspect intent
Module 9 -VI Forensics Scenario 6: Identifying sources
Module 10 –VI Forensics Scenario 7: Authenticating documents
Module 11 –Putting it all together –Course Summary
Who Should Attend?
* Virtual Infrastructure Specialists
* Forensic Investigators
Upon completion, Certified Virtualization Forensics Examiner students will have knowledge to perform virtualization forensic examinations. Have knowledge to accurately report on their findings from examinations Be ready to sit for the C)VFE Exam.
All Mile2 certifications will be awarded a 3-year expiration date.
There are two requirements to maintain Mile2 certification:
1) Pass the most current version of the exam for your respective existing certification
2) Earn 20 CEUs (Continuing Education Units) per year. You may submit your CEUs in your Mile2 inbox. These CEUs must fall under “Qualify Continuing Educational Activities).
Visit our certification renewal page for more information.
The Certified Security Awareness 2, C)SA2 exam is taken online through Mile2’s Assessment and Certification System (“MACS”), which is accessible on your mile2.com account.
Course exams are individually priced.
NOTE: You may purchase the exam without purchasing the course.
Exam cost is not included with the purchase of a live class.
The cost of the exam is included with the purchase of an Ultimate Self-Study Combo.
Do I have to purchase a course to buy a certification exam?
Do all Mile2 courses map to a role-based career path?
What Mile2 Courses/Tracks are Available?
Please see our Certification Roadmap for full details.