DF310 is a three-day preparation course designed for EnCase users preparing for the EnCase Certified Examiner (EnCE) certification process. The course provides an accelerated review of digital forensic skills and knowledge required for the two-phase EnCE certification, which consists of a written examination and a practical scenario examination with investigative report. The course covers digital forensic and EnCase Forensic concepts and methodology, navigation of the EnCase Forensic environment, proper handling and acquisition of digital evidence, computer functionality and file systems, evidence examination techniques, searching and bookmarking capabilities, and analysis of various artifacts including Windows registry, Windows artifacts, email, and Internet history. Students also learn to create and export examination reports using EnCase Forensic. The written examination is administered via an Internet-based testing service on the last day of class in a monitored, timed environment. Students who achieve a passing score of 80% or more become eligible to proceed to the practical examination. The practical examination is scenario-based and requires students to demonstrate proficiency in applying digital forensic concepts and techniques while preparing a written examination report for grading. Prerequisites include completion of DF210 - Building an Investigation with EnCase course. The course awards 24 CPE credits and is classified as intermediate level by NASBA.