Computer Hacking Forensic Investigator (CHFI)

EC-Council's C|HFI program prepares cybersecurity professionals with the knowledge and skills to perform effective digital forensics investigations and bring their organization into a state of forensic readiness. This includes establishing the forensics process, lab and evidence handling procedures, as well as the investigation procedures required to validate/triage incidents and point the incident response teams in the right direction. Forensic readiness is crucial as it can differentiate between a minor incident and a major cyber-attack that brings a company to its knees.

This intense hands-on digital forensics program immerses students in over 68 forensic labs, enabling them to work on crafted evidence files and utilize the tools employed by the world's top digital forensics professionals. Students will go beyond traditional hardware and memory forensics and learn current topics such as cloud forensics, mobile and IoT, investigating web application attacks, and malware forensics. C|HFI presents a methodological approach to computer forensics, including searching and seizing, chain-of-custody, acquisition, preservation, analysis, and reporting of digital evidence.

Students learn how to acquire and manage evidence through various operating environments, as well as the chain of custody and legal procedures required to preserve evidence and ensure it is admissible in court. This knowledge will help them prosecute cybercriminals and limit liability for target organizations.

The program provides credible professional knowledge with a globally recognized certification required for a successful digital forensics and DFIR careers, thus increasing your employability.

Prerequisites

The CHFI (ANSI) program require the candidate to have two years of work experience in the Information Security domain and should be able to provide a proof of the same as validated through the application process unless the candidate attends official training.

Recommended training for this certification

Exams

Domains:

  • 1. Forensic Science - 15%
  • 2. Regulations, Policies and Ethics - 10%
  • 3. Digital Evidence - 18%
  • 4. Procedures and Methodology - 17%
  • 5. Digital Forensics - 29%
  • 6. Tools/Systems/Programs - 11%

Duration: 4 hours
Number of questions: 150