Home / Certificates / CPP-33
Professional Certificate · Master's level · CPP-33
Digital Forensics and Evidence Preservation
For: Security analysts, systems and network administrators, incident response team members and security officers who have to handle digital traces.
Learning outcomes
- Collect and preserve digital traces while guaranteeing their integrity and chain of custody.
- Analyse system and network artefacts to establish a timeline.
- Position the forensic investigation in relation to the judicial investigation and the competent authorities.
Programme over 4 weeks
| Week | Content |
|---|---|
| Week 1 | Investigation within a legal framework: interaction with the judicial investigation and the Division spéciale de cybersécurité (Special Cybersecurity Division); procedural rules arising from loi n°2016-30 (law amending the Code of Criminal Procedure), studied from the text itself. |
| Week 2 | Acquisition, integrity hashes and chain of custody, on media provided in the isolated virtual lab. |
| Week 3 | Analysis of system and network artefacts in the lab; reconstruction of a timeline. |
| Week 4 | Professional simulation: analysis of a case provided in the lab, with a chain-of-custody log. |
Assessment
Marked professional simulation, assessed against a rubric (70%): analysis of a case provided, with a chain-of-custody log; online knowledge-check quiz (30%). All exercises take place in an isolated virtual lab, on fictitious data; no real system is analysed and no private individual is implicated.
The certificate is awarded with a mark of at least 10 out of 20.
Optional: Digital Forensics Report
An additional 1-credit module over 2 weeks (CPP-33C), awarded as a separate certificate; together with this certificate, it makes up the full course component of the original programme.
- Writing the forensic investigation report for management and for the authorities.
- Verifying the integrity of the evidence and the chain of custody before transmission.
At your own pace: the self-paced pathway
In a class, this certificate takes 4 weeks, on the cohort's dates. On the self-paced pathway, you start whenever you like, online, and progress at your own pace. The price is the same.
Estimate how long my pathway will take
- Duration
- about 4 weeks
- Estimated end
- 4 weeks after you start
- Examination
- Online, subject to available slots, no earlier than 4 weeks after you start
- Payment
- In a single payment
An indicative estimate, for a start today and 40 hours of work. You can change your pace along the way; the pathway must be completed within 12 weeks (about 3 months) of your start. Your e-Campus access opens with your first payment.
Admission
Experience in systems and network administration or in information systems security, assessed on application. Admission based on application; detailed requirements set by the school.
The credits you earn are recognised without further assessment if you later join the programme they come from, Professional Master's degree in Cybersecurity, within a period set by the certificate regulations.