Computer Hacking Forensic Investigator (CHFI)

About Course

EC-Council’s digital forensics credential: the forensic investigation process, evidence handling and chain of custody, disk and file system forensics, network and malware forensics, mobile and cloud forensics, and expert testimony.

About 36 hours.

Course Content

Module 1: Forensic investigation process

Chain of custody and evidence handling
First responder procedures
Forensic lab setup basics

Computer Hacking Forensic Investigator (CHFI)

About Course

Course Content

Module 1: Forensic investigation process

Chain of custody and evidence handling

First responder procedures

Forensic lab setup basics

Module 2: Disk and file system forensics

Disk imaging and hashing

File system analysis: NTFS, FAT, EXT

Data recovery techniques

Module 3: Network and malware forensics

Network traffic analysis for evidence

Log analysis and correlation

Malware forensics basics

Module 4: Mobile and cloud forensics

Mobile device acquisition and analysis

Cloud forensics challenges

Anti-forensics techniques and detection

Module 5: Reporting and exam prep

Writing a forensic report

Expert witness testimony basics

150-question timed practice exam