Digital Forensics & Incident Response Foundations (DFIRF)
Operational forensic capability for a connected threat landscape.
Course Overview
Most digital forensics and incident response training stops at theory — rigid frameworks, outdated case studies, and lab scenarios far removed from real operations. CDEC’s Digital Forensics & Incident Response Foundations (DFIRF) course was built to close that gap.
Developed and delivered by professionals who’ve deployed globally on military and corporate breach investigations, this programme combines forensic science, operational discipline, and modern adversary tradecraft into a single, actionable skillset.
Students learn how to identify, preserve, and analyse digital evidence across multiple environments — from field devices to enterprise systems — and respond decisively when incidents unfold. This is digital forensics taught by people who’ve done it under pressure, not from behind a desk.
What You’ll Learn
Core principles of digital forensics and incident response
Chain-of-custody integrity in real-world conditions
Acquisition and analysis of data from computers, mobile devices and cloud environments
Identifying indicators of compromise and attacker behaviour
Building defensible reports suitable for legal or disciplinary proceedings
Integrating DFIR workflows with OSINT and Threat Intelligence Operations
Why It ‘s Different
CDEC’s DFIRF course isn’t an academic exercise — it’s field deployed and globally validated. Our instructors have operated in environments ranging from the frontlines of the Global War On Terror to private incident response for multinational corporations. Every lesson is grounded in active practice, ensuring participants leave with confidence to act — not just memorise.
We bridge the space between technical precision and operational awareness, teaching digital forensics the way it’s actually used: in time-critical, high-stakes environments.
Course Format
Duration: 3 days (optional advanced 5-day variant)
Delivery: In-person or virtual with live lab access
Includes: Hands-on exercises, evidence files, investigation templates, and after-action reporting
Who It’s For
Cybersecurity and IT professionals seeking DFIR grounding
Law enforcement or corporate investigators handling digital evidence
Analysts supporting OSINT, intelligence, or incident response functions
Executives and team leads overseeing technical investigations