U.S. flag

An official website of the United States government


National Computer Forensics Institute

NCFI Alerts


Star divider image

First Responders

These courses are designed for individuals who are not currently conducting digital forensic exams and have a basic knowledge of computers and computer investigations.

First Responder Courses
Course IDTitle
BEC-V Business Email Compromise
BNIT Basic Network Investigation Training
BNIT-V Basic Network Investigation Training - Virtual
CFT Cyber Foundational Training
Case Python and the $7 Million Embezzlement
Case Study Ransomware Response Case Study
DCC Digital Currency Course
DCC-TNG-V Digital Currency Course - Instructor Training
DCC-V Digital Currency Course - Virtual
DEI Digital Evidence Investigations
DEI-V Digital Evidence Investigations - Virtual
DISC Digital Investigations Supervisors Course
DOC Drone Operations Course
FRESH Filesystem Recognition Electronic Sterilization and Hashing
IAC Investigative Analyst Course
RAC Report Authors Course
RIP Ransomware Investigative Principles
SKH Skimmer Hunter
SNI Social Networking Investigations

Basic Examiner

These courses are designed for individuals who are newly assigned to conducting digital forensic exams or network intrusion investigations, and who currently have a working knowledge of computer and computer investigations.

Basic Examiner Courses
Course IDTitle
BCERT Basic Computer Evidence Recovery Training
CIRC Cyber Incident Response Competition
CLP Command Line Principles
Case Study:QBOT QBOT Backdoor Trojan
DAF Drone Analysis and Forensics
DFC Drone Forensics Course
DTW Device Triage Workshop
DVR Digital Video Recorders
IPR Introduction to Phone Repair
ISF Introduction to Skimmer Forensics
LLE Linux for Law Enforcement
MDE Mobile Device Examiner
NITRO Network Intrusion Response Program
RIRT Ransomware Incident Response Training (RIRT)
SFC Skimmer Forensics Course
VFC Vehicle Forensics Course

Advanced Examiner

These courses are designed for individuals who are currently conducting digital forensic exams or network intrusion investigations, and who have a solid understanding of digital forensics.

Advanced Examiner Courses
Course IDTitle
AFT Advanced Forensics Training
AMDE Advanced Mobile Device Examiner
AMDE-V Advanced Mobile Device Examiner - Virtual
FSC Forensic Scripting Course
IRA Incident Response Analysis
IRA-V Incident Response Analysis - Virtual
MFMA Memory Forensics & Malware Analysis
MFMA-PU Memory Analysis for User Investigations
MFT Mac Forensics Training


These courses are designed for Prosecutors and Judges to effectively prosecute and preside over cases involving digital forensic evidence.

Prosecutor/Judge Courses
Course IDTitle
ADEP Advanced Digital Evidence for Prosecutors
DEJ Digital Evidence for Judges
DEP Digital Evidence for Prosecutors
View Course

PROD just calling to init appData