Certified Network Forensic Analysis Manager

Certified Network Forensic Analysis Manager WebPage Image

Course Overview

The Certified Network Forensic Analysis Manager certification course was originally developed for the U.S. government, and has now been made available to city, county, and state law enforcement agencies.  Civilian personnel outside the law enforcement community are also authorized to attend on a case-by-case basis.


This comprehensive course brings incident response and network forensic core competencies to advanced levels by presenting students with 12 detailed learning objectives. Students will be provided with both experiential knowledge and practical skills that simulate real-world scenarios, investigations, and recovery of evidentiary data in systems and networks.  With a specific focus on the centralizing and investigating of logging systems and network devices, students will cover topics such as: Incident Response Management; Live Data Collection; Analysis Methodology; Malware Triage; and, practical lab exercises utilizing the Wireshark packet capturing tool for network investigations.

Learning Objectives

01) Preparing for Network Forensic Investigations
02) Incident Response Management
03) Pre-Investigation Preparation
04) Initiating Network Forensic Investigations
05) Initial Development of Leads
06) Principles of Live Data Collection
07) Principles of Network Evidence
08) Enterprise Services and Topology
09) Forensic Analysis Methodology
10) Static and Dynamic Malware Triage
11) Forensic Strategies for Incident Remediation
12) Wireshark Labs: Packet Capture Analysis

Upcoming Sessions

Session 1

JULY 20-24, 2020
Monday-Friday, 8:00AM – 5:00PM
Location: Online with Live Instruction
Payment Due by July 13th, 2020


Session 2

OCTOBER 05-09, 2020
Monday-Friday, 8:00AM – 5:00PM
Location: Online with Live Instruction
Payment Due by Sept. 28th, 2020


Course Layout

Total Course Hours: 38

  • Lecture: 24 Hours
  • Lab: 10 Hours
  • Exam Prep: 2 Hours
  • Certification Exam: 2 Hours

Course Cost

$3,500, includes:

  • Course Textbook
  • Exam Prep Guide
  • Lab Textbook
  • CPE Completion Certificate
  • Course Lecture Handout
  • Course Certification Certificate
  • External Drive with Lab Images
  • Certification Exam

Financial Assistance

Phase 2 Advantage is now offering 100% financing at student loan rates for this course. (Please note: This financing is available through Phase2Advantage and not through Savannah Technical College). Click below to learn more about available financing available through Phase2Advantage.

Phase2Advantage Financing Banner

Career Outlook

The Certified Network Forensic Analysis Manager course is a component of the career progression track that supports the following Categories, Specialty Areas, and Work Roles as defined by the National Initiative for Cybersecurity Education (NICE) Cybersecurity Workforce Framework:

Exploitation Analyst (AN-EXP-001)
Cyber Crime Investigator (IN-INV-001)
Law Enforcement Forensics Analyst (IN-FOR-001)
All Source – Collection Manager (CO-CLO-001)
Cyber Intel Planner (CL-OPL-001)
Cyber Defense Forensics Analyst (IN-FOR-002)

Average Yearly Salary: