The International Association of Computer Investigative Specialists

BCFE: Basic Computer Forensic Examiner

BCFE Course Overview

The Basic Computer Forensic Examiner (BCFE) course is the cornerstone training provided by IACIS. BCFE is a 76-hour course of instruction that is offered over 2 consecutive weeks and is designed to provide students with a foundational knowledge of digital computer forensics to be able to enter into the IACIS Certified Forensic Computer Examiner (CFCE) certification process. This training involves a combination of lectures, instructor-led and independent hands-on practical exercises, and independent laboratory activities which help the student learn the underlying principles of digital computer forensic theory and examinations and how to apply them in practice.

While the name of the training does include the word “Basic”, over the years it has evolved into more than that. Students are expected to be familiar with the Windows operating system; they should be able to maneuver their way around different settings in Windows like the Control Panel and Task Bar; and be familiar with terminology associated with Windows like “registry” and “hidden files”. This is a very fast-paced training and as such, having knowledge of rudimentary Windows functions and settings will help the student keep on pace with the material being presented.

This course may seem like it is primarily for those who are beginners in the field of computer forensics, however, it is equally suited for those who are advanced students and experienced practitioners. IACIS and the BCFE program champions a forensic tool neutrality and an independent methodology approach to learning computer forensics. This enables IACIS to provide students with a deeper exploration of underlying principles than might be afforded in other programs, which are designed to teach students how to use a forensic tool to complete a task.

Approximately 90% of what is needed for students to successfully complete the BCFE course and the subsequent certification process is provided during course lectures and practical exercises. For the CFCE certification process, students will be expected to complete additional outside reading and perform additional independent research.

More Details

There are no forensic training prerequisites for this class. The BCFE course encompasses everything from search and seizure of digital devices to analysis of FAT and NTFS file systems; from forensic imaging to registry analysis. Students should have a decent understanding of Windows 10, its different settings and how to maneuver within Windows. Those that do not have this knowledge will find the BCFE program challenging.

Certainly, one who has more extensive experience will initially be more comfortable with some of the foundational course material, but as the program advances whatever “knowledge gap” there might be at the start of the course will quickly close. In the end, all students are considered at the same level and each course is constructed with this in mind.

IACIS advocates a forensic tool-independent and forensic methodology-independent approach to teaching computer forensics. IACIS does not endorse nor support any forensic software tool, forensic hardware device, or any software program. Students are not required nor expected to have any knowledge of forensic software or automated tool suite; and there is no expectation that students in the BCFE program be familiar with or have any experience using any forensic hardware or software.

Students are not required to bring a computer with them to class. With participation in the BCFE course, IACIS provides each student a laptop computer for their use during the course and to take home with them. Along with the laptop, students will also receive a write-blocker and other equipment. The BCFE Training manual consists of multiple printed manuals. Students should be aware that they will be returning home with more baggage than they came with and should plan for this.

Students may bring a laptop computer or other digital device with them for personal use outside of the classroom. Students are not permitted to use their personal laptop computers, pad/tablet comp

The BCFE course is a 76 hour program. Instruction takes place Monday-Friday from 0800-1700. There will be ample breaks during the day with an hour for lunch as shown in the schedule. Attendance for the entire 2 weeks is mandatory to meet the requirements of a successful BCFE course.

A Certificate of Course Completion is given to students who meet all the requirements of attendance. This is not the IACIS Certified Forensic Computer Examiner certificate. That is a process unto itself which will be addressed during the two week BCFE course.

So that they are not rushed and have enough time to make return flights, students should not make flight arrangements before 1900 on the last day of training to account for traffic and airport security clearances.

Recording of any kind is not permitted during classes, activities or lab sessions. This includes audio, video, still photography or screen-recording of any kind.

The dress code for classroom events is “business casual”. Students are expected to dress professionally and appropriately (collared shirts, slacks/5-11 style pants). Shorts, t-shirts, tank tops, sandals, flip-flops and similar casual apparel will not be permitted in the classroom at any time.

The BCFE classroom is usually in a large, air-conditioned venue and the temperature is set lower than what you may be comfortable with at times due to the large number of computers and other devices that generate heat. It is advisable for you to bring a sweater or a light jacket to wear.

Quick Details

  • CFCE

Core Competencies / Details

There are seven competency areas addressed in the BCFE/CFCE Program:

  1. Pre-Examination Procedures
  2. Computer Fundamentals
  3. Partition Schemes
  4. File Systems
  5. Data Recovery
  6. Windows Artifacts
  7. Presentation of Findings

Download PDFPlease click here to download the official BCFE-CFCE Core Competencies document which includes details for each core competency.

Download DOcument
IACIS Chair

Test Chair

BCFE IACIS Chair

IACIS ChairThe BCFE course is guided by experienced professionals led by our distinguished IACIS Chair, ensuring that course content is both current and highly relevant to industry standards and practices.

See Upcoming Events

Apply knowledge towards:

CFCE IACIS Certification

CFCE

Certified Forensic Computer Examiner Program

CAWFE IACIS Certification

ICMDE

Certified Mobile Device Examiner

CMDE IACIS Certification

CAWFE

Certified Advanced Windows Forensic Examiner

Budapest 2025
6 – 17 October 2025
Budapest
Learn More
2025 Orlando Training Conference
2025
Orlando, FL
Learn More
See More Events
Upcoming events Details of the next event for this course

Where and When is the BCFE Course Offered?

The BCFE course is offered regularly throughout the year at various locations. It is designed to be accessible to professionals seeking to enhance their skills or transition into the digital forensics field. For specific dates and locations, please check out our Events page.

How to Register for this Course

Existing IACIS members, simply log in with your IACIS credentials and go to the PURCHASE TRAINING page to purchase and register for the course.

For non-IACIS members, the membership fee is waived with the purchase of the training course; however, to register for the course you must complete a membership application at the time of purchase. Go to the PURCHASE TRAINING page to purchase and register for the course and complete your membership application.

Register Now
Skip to content