Training Mile2

Training goals dlearning

code: C)NFE | version: v2.1

The Certified Network Forensics Examiner vendor-neutral certification was developed for a U.S. classified government agency. The C)NFE takes a digital and network forensic skill set to the next level by navigating through over twenty modules of network forensic topics.

The CNFE provides practical experience through our lab exercises that simulate real-world scenarios that cover investigation and recovery of data in a network, Physical Interception, Traffic Acquisition, Analysis, Wireless Attacks, and SNORT. The course focuses on the centralizing and investigating of logging

Upon completion, students will:

  • Have the knowledge to perform network forensic examinations.
  • Have the knowledge to accurately report on their findings from examinations
  • Be ready to sit for the C)NFE Exam

Who Should Attend:

  • Digital & Network Forensic Engineers
  • IS & IT managers
  • Network Auditors

Accreditations & Acknowledgements:

Mile2® is:

  • ACCREDITED by the NSA CNSS 4011-4016
  • MAPPED to NIST / Homeland Security NICCS's Cyber Security Workforce Framework
  • APPROVED on the FBI Cyber Security Certification Requirement list (Tier 1-3)

Conspect Show list

  1. Digital Evidence Concepts
  2. Network Evidence Challenges
  3. Network Forensics Investigative Methodology
  4. Network-Based Evidence
  5. Network Principles
  6. Internet Protocol Suite
  7. Physical Interception
  8. Traffic Acquisition SoftwareScanning
  9. Live Acquisition
  10. Analysis
  11. Layer 2 Protocol
  12. Wireless Access Points
  13. Wireless Capture Traffic and Analysis
  14. Wireless Attacks
  15. NIDS Snort
  16. Centralized Logging and Syslog
  17. Investigating Network Devices
  18. Web Proxies and Encryption
  19. Network Tunneling Scanning
  20. Malware Forensics


  1. Module 4, 5 & 6: - Working with Captured Files
  2. Module 7, 8, 9 10, 11: Evidence Acquisition
  3. Module 12, 13, 14: Wireless Traffic Evidence Acquisition
  4. Module 15: IDS/IPS Forensics
  5. Module 16 & 21: Network forensics and investigating logs
  6. Module 17 & 18: SSL & Encryption
  7. Module 20: Malware Forensics
Download conspect training as PDF

Additional information

  • Must have a Digital or Computer Forensics Certification or equivalent knowledge
  • 2 years of IT Security
  • Working Knowledge of TCPIP
Difficulty level
Duration 5 days

The participants will obtain certificates signed by Mile2 (course completion).

This course will help prepare you for the Certified Network Forensics Examiner exam, which is available through the on-line Mile2’s Assessment and Certification System (“MACS”),  and is accessible on your account. The exam will take 2 hours and consist of 100 multiple choice questions. 

Each participant in an authorized training C)NFE - Certified Network Forensics Examiner will receive a free CNFE exam voucher.


Certified Mile2 Instructor.

Other training Mile2 | Forensics

Training thematically related


Contact form

Please fill form below to obtain more info about this training.

* Fields marked with (*) are required !!!

Information on data processing by Compendium - Centrum Edukacyjne Spółka z o.o.

1400 EUR








  • hybrid training: HYBRID
    • General information
    • Guaranteed dates
    • Last minute (-10%)
    • Language of the training
    • English
  • hybrid training: HYBRID
    • General information
    • Guaranteed dates
    • Last minute (-10%)
    • Language of the training
    • English
Book a training appointment

Traditional training

Sessions organised at Compendium CE are usually held in our locations in Kraków and Warsaw, but also in venues designated by the client. The group participating in training meets at a specific place and specific time with a coach and actively participates in laboratory sessions.

Dlearning training

You may participate from at any place in the world. It is sufficient to have a computer (or, actually a tablet, or smartphone) connected to the Internet. Compendium CE provides each Distance Learning training participant with adequate software enabling connection to the Data Center. For more information, please visit site


Paper materials

Traditional materials: The price includes standard materials issued in the form of paper books, printed or other, depending on the arrangements with the manufacturer.

Electronic materials

Electronic materials: These are electronic training materials that are available to you based on your specific application: Skillpipe, eVantage, etc., or as PDF documents.

Ctab materials

Ctab materials: the price includes ctab tablet and electronic training materials or traditional training materials and supplies provided electronically according to manufacturer's specifications (in PDF or EPUB form). The materials provided are adapted for display on ctab tablets. For more information, check out the ctab website.

Upcoming Mile2 training

Training schedule Mile2