Certifications

The Certified Network Forensic Analysis Manager certification course was originally developed for the U.S. government. This comprehensive course brings incident response and network forensic core competencies to advanced levels by presenting students with 16 detailed learning objectives. Students will be provided with both experiential knowledge and practical skills that simulate real-world scenarios, investigations, and recovery of evidentiary data in systems and networks. Students will cover topics such as Incident Response Management, Live Data Collection, Analysis Methodology, and Malware Triage. Practical lab exercises utilize the Project Areas Cyber Range and Wireshark network protocol analyzer software.

The Certified Network Forensic Analysis Manager course is a component of the career progression track that supports the required Categories, Specialty Areas and Work Roles as defined by the National Initiative for Cybersecurity Education (NICE) Cybersecurity Workforce Framework. It provides a common language to speak about cyber roles and jobs and can be referenced to define professional requirements in cybersecurity.

• COUNTERINTELLIGENCE FORENSICS ANALYST(IN-FOR-001)
• ALL SOURCE-COLLECTION MANAGER(CO-CLO-001)
• CYBER DEFENSE INCIDENT RESPONDER(PR-CIR-001)
• CYBER CRIME INVESTIGATOR(IN-INV-001)
• CYBER DEFENSE FORENSICS ANALYST(IN-FOR-002)
• EXPLOITATION ANALYST(AN-EXP-001)

• Introduction to Network Forensic Investigations
• Overview of Common Network Devices
• Overview of Common Network Services
• Fundamentals of Secure Network Architecture
• Incident Response Management
• Investigative Principles and Lead Development
• Investigation Planning and Preparation
• Forensic Analysis Methodology
• Principles of Network Evidence
• Initiating Network Forensic Investigations
• Initial Development of Leads
• Principles of Live Data Collection
• Investigating Windows Systems
• Investigating Applications
• Static and Dynamic Malware Triage
• Forensic Strategies for Incident Remediation

• Exam Prep Guide
• Course Workbook & Labs
• Lab Images (if Applicable)
• Practice Assessment Quizzes
• 40-Hour CPE Credit Certificate
• Knowledge Assessment Examination

Upon completion of online courses, students will be prepared to sit for the knowledge assessment exam. The online examination will consist of True/False, Multiple Choice, and Fill in the Blank questions. The exam may be taken at any time within 3 months of completing the certification course.

Students will have two hours to complete a computer-based examination consisting of 100 questions. A score of 70% or higher is required to earn the certification. Upon successful completion of the exam, students will be sent a hardcopy of their certification and their CPE credit documentation via email (PDF format) within 72-hours of the exam date.

The examination is “closed book.” However, students will be allowed to use their notes on material presented during the course as well as their Course Workbooks.

Project Ares Video