Certified Forensic Investigation Specialist (CFIS) Course Overview

Enroll for the 4-days Certified Forensic Investigation Specialist (CFIS) training and certification course from Koenig solutions.

This course is designed to practically develop a cyber-investigator’s skills and extend their knowledge to reveal potential ‘smoking gun’ evidence from a system. This specialist-level course is for professionals whose role requires them to capture and analyse data from ‘live’ systems. It introduces the latest guidelines and artefacts on current Windows operating systems, and teaches essential skills for conducting an efficient and comprehensive investigation.

Target Audience

This course is primarily aimed at practising forensic investigators and digital security practitioners who have computer forensic experience who want to dig deeper and develop their skills.

Learning Objectives

Upon completion of this course, you will be able to:

  • Understand the digital investigation process and best practice
  • Build a bootable USB data collection device
  • Collect data from Live, Remote and Virtual systems
  • Understand the underlying structures associated with NTFS, FAT32 and ExFAT file systems
  • Collect and process volatile data
  • Capture a mailbox from a live Microsoft exchange server
  • Investigate a Windows domain controller to identify systems and users
  • Understand RAID storage and rebuild data
  • Test data ‘wiping’ software
  • Understand types of ‘User’ account
  • Investigate Windows Event Logs and USB device activity
  • Examine user activity for program execution, file activity and system navigation
  • Investigate log files
  • Query Chrome web-browser SQLite databases and extract stored passwords
  • Explore and extract data from Volume Shadow Copies
  • Parse and interpret the USN/ Change Log

This is a Rare Course and it can be take up to 3 weeks to arrange the training.

The 1-on-1 Advantage


Flexible Dates

  • • Choose Start Date
  • • Reschedule After Booking
  • • Weekend / Evening Option

4-Hour Sessions

You will learn:

Module 1: Digital Forensic Investigations
  • A review of the investigation process, best practice and equipment
  • How can data be stolen, investigated and possibly mitigated?
  • Images and Clones; Static, Booted and Live; Physical and selective
  • Solid State devices
  • Considerations and associated problems
  • Gathering information from Domain Controllers
  • Capturing File Shares and inaccessible systems
  • Identifying and rebuilding RAID’s
  • Capturing and examining virtualised systems
  • Memory capture and volatile data collection from ‘live’ systems
  • Investigating memory using volatility
  • Exchange servers and web-mail
  • Facebook, Websites, Linux and Macs
  • Understanding FAT32, NTFS and ExFAT data structures from a forensic perspective
  • Windows Recycle Bins
  • Testing wiping software
  • Investigating the Windows Registry, User Accounts, Event Logs and USB connected devices
  • Identifying Program execution, Files opened and Folder navigation
  • Windows Object ID’s and file tracking
  • Web and FTP logs
  • Examination using Cygwin
  • SQLite and Chrome browser artefacts
  • Approaches to extracting data from VSC’s
  • Windows File History
  • Understand the value of the NTFS journal in investigations
Live Online Training (Duration : 32 Hours) Fee On Request
We Offer :
  • 1-on-1 Public - Select your own start date. Other students can be merged.
  • 1-on-1 Private - Select your own start date. You will be the only student in the class.

4 Hours
8 Hours
Week Days

Start Time : At any time

12 AM
12 PM

1-On-1 Training is Guaranteed to Run (GTR)
Group Training
Date On Request
Course Prerequisites
  • Principles & general guidelines surrounding forensic investigations
  • Experience of carrying out forensic investigations
  • A basic computer forensic course e.g. the CFIP course

Request More Information

Add Name and Email Address of participant (If different from you)


The Fee includes:
  • Courseware
No, it is not included.
Yes, we do.
Yes, course requiring practical include hands-on labs.
Yes, the site is secure by utilizing Secure Sockets Layer (SSL) Technology. SSL technology enables the encryption of sensitive information during online transactions. We use the highest assurance SSL/TLS certificate, which ensures that no unauthorized person can get to your sensitive payment data over the web.
You can request a refund if you do not wish to enroll in the course.
Schedule for Group Training is decided by Koenig. Schedule for 1-on-1 is decided by you.
To receive an acknowledgment of your online payment, you should have a valid email address. At the point when you enter your name, Visa, and other data, you have the option of entering your email address. Would it be a good idea for you to decide to enter your email address, confirmation of your payment will be emailed to you.
In 1-on-1 you can select your own schedule, other students can be merged but you select the schedule. Choose 1-on-1 if published schedule do not meet your requirement. If you also want a private session, opt for 1-on-1 Public.
Credit card transactions normally take 48 hours to settle. Approval is given right away; however, it takes 48 hours for the money to be moved.
Yes, Koenig follows a BYOL(Bring Your Own Laptop) policy.
It is recommended but not mandatory. Being acquainted with the basic course material will enable you and the trainer to move at a desired pace during classes.You can access courseware for most vendors.
Buy-Now. Pay-Later option is available using credit card in USA and India only.
You will receive the digital certificate post training completion via learning enhancement tool after registration.
Yes you can.
Yes, we do. For details go to flexi
You can pay through debit/credit card or bank wire transfer.
Dubai, Goa, Delhi, Bangalore.
Yes you can request your customer experience manager for the same.
We use the best standards in Internet security. Any data retained is not shared with third parties.
You can buy online from the page by clicking on "Buy Now". You can view alternate payment method on payment options page.
Yes, you can pay from the course page and flexi page.
In both, you choose the schedule. In public, other participants can join, Private other participants want to join.
After you submit your payment, you will land on the payment confirmation screen.It contains your payment confirmation message. You will likewise get a confirmation email after your transaction is submitted.
We do accept all major credit cards from Visa, Mastercard, American Express, and Discover.
Yes, we do accept partial payments, you may use one payment method for part of the transaction and another payment method for other parts of the transaction.
Yes, if we have an office in your city.
Yes, we do offer corporate training More details
Yes, we do.
Yes, we also offer weekend classes.
Yes, fee excludes local taxes.

Prices & Payments

Yes of course.
Yes, We are

Travel and Visa

Yes we do after your registration for course.

Food and Beverages



Medical services in India are at par with the world and are a fraction of costs in Europe and USA. A number of our students have scheduled cosmetic, dental and ocular procedures during their stay in India. We can provide advice about this, on request.
Says our CEO-
“It is an interesting story and dates back half a century. My father started a manufacturing business in India in the 1960's for import substitute electromechanical components such as microswitches. German and Japanese goods were held in high esteem so he named his company Essen Deinki (Essen is a well known industrial town in Germany and Deinki is Japanese for electric company). His products were very good quality and the fact that they sounded German and Japanese also helped. He did quite well. In 1970s he branched out into electronic products and again looked for a German name. This time he chose Koenig, and Koenig Electronics was born. In 1990s after graduating from college I was looking for a name for my company and Koenig Solutions sounded just right. Initially we had marketed under the brand of Digital Equipment Corporation but DEC went out of business and we switched to the Koenig name. Koenig is difficult to pronounce and marketeers said it is not a good choice for a B2C brand. But it has proven lucky for us.” – Says Rohit Aggarwal (Founder and CEO - Koenig Solutions)
All our trainers are fluent in English . Majority of our customers are from outside India and our trainers speak in a neutral accent which is easily understandable by students from all nationalities. Our money back guarantee also stands for accent of the trainer.
Yes, if you send 4 participants, we can offer an exclusive training for them which can be started from Any Date™ suitable for you.