An official website of the United States government. Here’s how you know.

National Computer Forensics Institute

NCFI Alerts


Star divider image

First Responders

These courses are designed for individuals who are not currently conducting digital forensic exams and have a basic knowledge of computers and computer investigations.

First Responder Courses
Course IDTitle
BEC-V Business Email Compromise
BNIT Basic Network Investigation Training
BNIT-V Basic Network Investigation Training - Virtual
CDR Call Detail Records Analysis
CFT Cyber Foundational Training
CIT Cyber Investigative Techniques
Case Python and the $7 Million Embezzlement
Case Study Ransomware Response Case Study
Case Study: ATM ATM Jackpotting
Case Study: EMV EMV Relay Attacks
DCC Digital Currency Course
DCC-TNG-V Digital Currency Course - Instructor Training
DCC-V Digital Currency Course - Virtual
DEI Digital Evidence Investigations
DEI-V Digital Evidence Investigations - Virtual
DISC Digital Investigations Supervisors Course
FRESH Filesystem Recognition Electronic Sterilization and Hashing
OSINT Open Source Intelligence
RAC Report Authors Course
RIP Ransomware Investigative Principles
SNI Social Networking Investigations

Basic Examiner

These courses are designed for individuals who are newly assigned to conducting digital forensic exams or network intrusion investigations, and who currently have a working knowledge of computer and computer investigations.

Basic Examiner Courses
Course IDTitle
BCERT Basic Computer Evidence Recovery Training
CLP Command Line Principles
DAF Drone Analysis and Forensics
DTW Device Triage Workshop
DVR Digital Video Recorders
IOT Internet of Things
IPR Introduction to Phone Repair
LLE Linux for Law Enforcement
MDE Mobile Device Examiner
NITRO Network Intrusion Response Program
SFC Skimmer Forensics Course
SKT Skimmer Tech
VFC Vehicle Forensics Course

Advanced Examiner

These courses are designed for individuals who are currently conducting digital forensic exams or network intrusion investigations, and who have a solid understanding of digital forensics.

Advanced Examiner Courses
Course IDTitle
AFT Advanced Forensics Training
AMDE Advanced Mobile Device Examiner
AMET Advanced Mobile Extraction Techniques
DCTT Digital Currency Tracing Techniques
FSC Forensic Scripting Course
FTV Forensic Tool Validation
IMD Instructor Module Development
IRA Incident Response Analysis
IRA-V Incident Response Analysis - Virtual
MFMA Memory Forensics & Malware Analysis
MFT Mac Forensics Training


These courses are designed for Prosecutors and Judges to effectively prosecute and preside over cases involving digital forensic evidence.

Prosecutor/Judge Courses
Course IDTitle
ADEP Advanced Digital Evidence for Prosecutors
DEJ Digital Evidence for Judges
DEP Digital Evidence for Prosecutors
View Course

PROD just calling to init appData