Every 13Cubed full course includes a certification attempt at no additional cost, giving you the opportunity to validate your practical digital forensics skills. Mini courses do not include certification.
You can earn a certification and digital badge for the following courses:
Investigating Windows Endpoints
Certification: IWE Gold | Silver | Bronze
Investigating Windows Memory
Certification: IWM Gold | Silver | Bronze
Investigating Linux Devices
Certification: ILD Gold | Silver | Bronze
Investigating macOS Endpoints
Certification: IME Gold | Silver | Bronze
Earn certifications in all four and you'll also automatically receive the XPlat Forensic Investigator (XPFI) credential.
Each certification is tightly integrated with the course it accompanies. When you feel ready — whether that's after going through the entire course or brushing up on specific topics — you can proceed to the Knowledge Assessment module to begin the certification process.
The Knowledge Assessment contains both a multiple-choice component to test your understanding of key concepts and a hands-on practical component where you'll demonstrate your ability to work with forensic artifacts and tools in realistic investigative scenarios. This dual approach ensures you're evaluated on both your theoretical knowledge and your ability to apply it.
Our certification system rewards mastery and perseverance:
🥇 Gold Certificate and Badge – awarded to students who pass on their first attempt
🥈 Silver Certificate and Badge – for students who pass on their second attempt
🥉 Bronze Certificate and Badge – for students who pass on their third or subsequent attempt
Each credential includes its issue date, but there is no expiration and no requirement to renew. Students may retake a certification while actively enrolled in the course to demonstrate continued competency and obtain an updated issue date.
⭐ Click here to view a sample credential.
Digital forensics doesn't stop at one operating system. Real investigations cross Windows, Linux, and macOS, and often all three in the same case.
Students who earn certifications in all four 13Cubed courses receive the XPlat Forensic Investigator (XPFI) credential, recognizing demonstrated capability across all three major operating systems in use today.
No separate exam and no additional cost. XPFI is issued automatically once your fourth certification is earned.
Any tier qualifies. Gold, Silver, or Bronze on each of the four component certifications all count toward XPFI.
Any purchase path qualifies. Individual courses, bundles, or any combination — what matters is holding the four certifications.
No expiration. Like all 13Cubed credentials, XPFI carries an issue date but never expires.
XPFI requires certifications in all four of the following: Investigating Windows Endpoints (IWE), Investigating Windows Memory (IWM), Investigating Linux Devices (ILD), and Investigating macOS Endpoints (IME).
Every 13Cubed credential carries a unique certificate ID and QR code, and is hosted on a public verification page. An employer, client, or court can confirm a credential is authentic without contacting us — scan the QR code on the certificate or open the credential link directly.
Many digital forensics programs are expensive, fragmented, or focused more on theory than real investigative work. 13Cubed offers a focused, hands-on alternative designed to be accessible without compromising on depth or rigor.
Here's how we stand apart:
All-inclusive Pricing: Certification is built into the course cost — no separate exam fees, no hidden charges.
Balanced Assessment Approach: Our course certification assessments combine conceptual questions with practical, hands-on exercises to test what really matters: your ability to investigate.
Created by a Practitioner, Not a Committee: Each course is developed by an experienced forensics professional actively working in the field. The training is grounded in real casework and continually updated as tools and techniques evolve.
No Credential Expiration, No Renewal Fees: Your credential doesn't expire, and there's no need for costly renewals — though you're always free to retake it in the future to refresh your issue date, as long as you're actively enrolled in the course.
A Clear Certification Path: Each certification stands on its own, and together they build toward the XPlat Forensic Investigator credential, so your progress compounds instead of fragmenting.
Credentials You Can Share: Easily showcase your certification with downloadable digital certificates and shareable badges.
Whether you're just starting out in the field or building on years of experience, 13Cubed provides a rigorous, hands-on path to certification in digital forensics — with cross-platform training for Windows, Linux, and macOS.