CHFI v10 is a complete vendor-neutral course covering all major forensics investigation technologies and solutions. CHFI has detailed labs for a hands-on learning experience. On average, 50% of training time is dedicated to labs, loaded on EC-Council's CyberQ (Cyber Ranges).

How long is CHFI Certification valid for?

The CHFI credential is valid for a 3-year period but can be renewed each period by successfully earning EC-Council Continued Education (ECE) credits. Certified members will have to achieve a total of 120 credits (per certification) within a period of three years.

What are the benefits of CHFI?

CHFI certification is created to present the skills required to identify an attacker's imprints and accumulate the evidence to be presented in the court of law. The certification allows professionals to chase, investigate and arrest cybercriminals from anywhere within the world.

Is CHFI good certification?

Yes, it is. The benefits of taking this exam demonstrate why it's a must for you. EC-Council CHFI is the best exam you should consider taking if you want to learn new skills and enhance your knowledge to boost your cybersecurity career.

CHFI Certification is challenging and requires immense knowledge in the field of forensics which can be obtained through CHFI training. The two available options to appear for the certification exam are, Attend a CHFI Certification Training Program provided by the EC council or com.

Computer Hacking Forensic Investigator Training Course

Module 1: Computer Forensics in Today’s World
In this module, learn about Fundamentals of Computer Forensics, Digital Evidence, Legal Compliance in Computer Forensics, and more
- Understand the Fundamentals of Computer Forensics
- Understand Cybercrimes and their Investigation Procedures
- Understand Digital Evidence
- Understand Forensic Readiness, Incident Response and the Role of SOC (Security
- Operations Center) in Computer Forensics
- Identify the Roles and Responsibilities of a Forensic Investigator
- Understand the Challenges Faced in Investigating Cybercrimes
- Understand Legal Compliance in Computer Forensics
Module 2: Computer Forensics Investigation Process
In this module, learn about Forensic Investigation Process, Investigation Phase, and more
- Understand the Forensic Investigation Process and its Importance
- Understand the Pre-investigation Phase
- Understand First Response
- Understand the Investigation Phase
- Understand the Post-investigation Phase
Module 3: Understanding Hard Disks and File Systems
In this module, learn about Disk Drives, Booting Process of Windows, Linux and Mac Operating Systems, and more
- Describe Different Types of Disk Drives and their Characteristics
- Explain the Logical Structure of a Disk
- Understand Booting Process of Windows, Linux and Mac Operating Systems
- Understand Various File Systems of Windows, Linux and Mac Operating Systems
- Examine File System Using Autopsy and The Sleuth Kit Tools
- Understand Storage Systems
- Understand Encoding Standards and Hex Editors
Module 4: Data Acquisition and Duplication
In this module, learn about Data Acquisition Fundamentals and Methodology
- Understand Data Acquisition Fundamentals
- Understand Data Acquisition Methodology
- Prepare an Image File for Examination
Module 5: Defeating Anti-forensics Techniques
In this module, learn about Anti-forensics Techniques, File Carving Techniques, Hidden Data in File System Structures, and more
- Understand Anti-forensics Techniques
- Discuss Data Deletion and Recycle Bin Forensics
- Illustrate File Carving Techniques and Ways to Recover Evidence from Deleted
- Explore Password Cracking/Bypassing Techniques
- Detect Steganography, Hidden Data in File System Structures, Trail Obfuscation, and
- Understand Techniques of Artifact Wiping, Overwritten Data/Metadata Detection, and Encryption
- Detect Program Packers and Footprint Minimizing Techniques
- Understand Anti-forensics Countermeasures
Module 6: Windows Forensics
In this module, learn about Cache, Cookie and History Recorded in Web Browsers, Text-based Logs and Windows Event Logs, and more
- Collect Volatile and Non-volatile Information
- Perform Windows Memory and Registry Analysis
- Examine the Cache, Cookie and History Recorded in Web Browsers
- Examine Windows Files and Metadata
- Understand ShellBags, LNK Files, and Jump Lists
- Understand Text-based Logs and Windows Event Logs
Module 7: Linux and Mac Forensics
In this module, learn about Volatile and Non-volatile Data in Linux, Mac Forensics, and more
- Understand Volatile and Non-volatile Data in Linux
- Analyze Filesystem Images Using The Sleuth Kit
- Demonstrate Memory Forensics Using Volatility & PhotoRec
- Understand Mac Forensics
Module 8: Network Forensics
In this module, learn about Network Forensics, Network Traffic, Incident Detection and Examination with SIEM Tools, and more
- Understand Network Forensics
- Explain Logging Fundamentals and Network Forensic Readiness
- Summarize Event Correlation Concepts
- Identify Indicators of Compromise (IoCs) from Network Logs
- Investigate Network Traffic
- Perform Incident Detection and Examination with SIEM Tools
- Monitor and Detect Wireless Network Attacks
Module 9: Investigating Web Attacks
In this module, learn about Web Application Forensics, Functionality of Web Application Firewall (WAF), Internet Information Services (IIS) Logs, and more
- Understand Web Application Forensics
- Understand Internet Information Services (IIS) Logs
- Understand Apache Web Server Logs
- Understand the Functionality of Intrusion Detection System (IDS)
- Understand the Functionality of Web Application Firewall (WAF)
- Investigate Web Attacks on Windows-based Servers
- Detect and Investigate Various Attacks on Web Applications
Module 10: Dark Web Forensics
In this module, learn about Dark Web, Identify the Traces of Tor Browser during Investigation, and more
- Understand the Dark Web
- Determine How to Identify the Traces of Tor Browser during Investigation
- Perform Tor Browser Forensics
Module 11: Database Forensics
In this module, learn about Database Forensics, MYSQL Forensics, Web Application Database, and more
- Understand Database Forensics and its Importance
- Determine Data Storage and Database Evidence Repositories in MSSQL Server
- Collect Evidence Files on MSSQL Server
- Perform MYSQL Forensics
- Understand Internal Architecture of MySQL and Structure of Data Directory
- Understand Information Schema and List MySQL Utilities for Performing Forensic
- Perform MySQL Forensics on WordPress Web Application Database
Module 12: Cloud Forensics
In this module, learn about concepts of Basic Cloud Computing, Fundamentals of Microsoft Azure, Forensic Methodologies for Containers and Microservices, and more
- Understand the Basic Cloud Computing Concepts
- Understand Cloud Forensics
- Understand the Fundamentals of Amazon Web Services (AWS)
- Determine How to Investigate Security Incidents in AWS
- Understand the Fundamentals of Microsoft Azure
- Determine How to Investigate Security Incidents in Azure
- Understand Forensic Methodologies for Containers and Microservices
Module 13: Investigating Email Crimes
In this module, learn about basics of Email, Email Crime Investigation and U.S. Laws Against Email Crime
- Understand Email Basics
- Understand Email Crime Investigation and its Steps
- U.S. Laws Against Email Crime
Module 14: Malware Forensics
In this module, learn about Malware Forensics Fundamentals, Malware Attacks, and more
- Define Malware and Identify the Common Techniques Attackers Use to Spread Malware
- Understand Malware Forensics Fundamentals and Recognize Types of Malware Analysis
- Understand and Perform Static Analysis of Malware
- Analyze Suspicious Word and PDF Documents
- Understand Dynamic Malware Analysis Fundamentals and Approaches
- Analyze Malware Behavior on System Properties in Real-time
- Analyze Malware Behavior on Network in Real-time
- Describe Fileless Malware Attacks and How they Happen
- Perform Fileless Malware Analysis - Emotet
Module 15: Mobile Forensics
In this module, learn about Architectural Layers, Phone Locks, Logical Acquisition on Android, SIM File System , and more
- Understand the Importance of Mobile Device Forensics
- Illustrate Architectural Layers and Boot Processes of Android and iOS Devices
- Explain the Steps Involved in Mobile Forensics Process
- Investigate Cellular Network Data
- Understand SIM File System and its Data Acquisition Method
- Illustrate Phone Locks and Discuss Rooting of Android and Jailbreaking of iOS Devices
- Perform Logical Acquisition on Android and iOS Devices
- Perform Physical Acquisition on Android and iOS Devices
- Discuss Mobile Forensics Challenges and Prepare Investigation Report
Module 16: IoT Forensics
In this module, learn about IoT Security Problems, Types of IoT Threats, IoT Forensics, and more
- Understand IoT and IoT Security Problems
- Recognize Different Types of IoT Threats
- Understand IoT Forensics
- Perform Forensics on IoT Devices
Module 17: Complimentary Module 1: Soft Skills Development
- Business Communication
- Preparation for the Interview
- Presentation Skills
Module 18: Complimentary Module 2: Resume Writing
- Resume Writing

Know the complete offerings of our Computer Hacking Forensic Investigator (CHFI) v10 Course