EC-Council
EC-Council Computer Hacking Forensics Investigator (CHFI) v11
Investigate cyber crime and present evidence that stands up.
5 daysIntermediate15 modulesEC-Council Certified Hacking Forensics Investigator (CHFI)
About this course
Investigate cyber crime and present evidence that stands up. Over five days you will follow the forensic process, acquire and preserve data, defeat anti-forensics, and investigate Windows, Linux, macOS, networks, the web, the dark web, email, malware, mobile devices and the cloud, preparing for CHFI.
Curriculum
15 modules
- Understand the Fundamentals of Computer Forensics
- Understand Cybercrimes and their Investigation Procedures
- Understand Digital Evidence and eDiscovery
- Understand Forensic Readiness
- Understand the Role of Various Processes and Technologies in Computer Forensics
- Identify the Roles and Responsibilities of a Forensic Investigator
- Understand the Challenges Faced in Investigating Cybercrimes
- Understand Various Standards and Best Practices Related to Computer Forensics
- Understand Laws and Legal Compliance in Computer Forensics
- Understand the Forensic Investigation Process and its Importance
- Understand First Response
- Understand the Pre-investigation Phase
- Understand the Investigation Phase
- Understand the Post-investigation Phase
- Describe Different Types of Disk Drives and their Characteristics
- Explain the Logical Structure of a Disk
- Understand the Booting Process of Windows, Linux, and macOS Operating Systems
- Understand Various File Systems of Windows, Linux and macOS Operating Systems
- Understand File System Analysis
- Understand Storage Systems
- Understand Encoding Standards and Hex Editors
- Analyze Popular File Formats Using Hex Editor
- Understand Data Acquisition Fundamentals
- Understand eDiscovery
- Understand Data Acquisition Methodology
- Prepare an Image File for Examination
- Understand Anti-forensics Techniques
- Discuss Data Deletion and Recycle Bin Forensics
- Illustrate File Carving Techniques and Ways to Recover Evidence from Deleted Partitions
- Explore Password Cracking/Bypassing Techniques
- Detect Steganography, Hidden Data in File System Structures, Trail Obfuscation, and File Extension Mismatch
- Understand Techniques of Artifact Wiping, Overwritten Data/Metadata Detection, and Encryption
- Detect Program Packers and Footprint Minimizing Techniques
- Understand Windows Forensics
- Collect Volatile Information
- Collect Non-volatile Information
- Perform Windows Memory Analysis
- Perform Windows Registry Analysis
- Perform Electron Application Analysis
- Perform Web Browser Forensics
- Examine Windows Files and Metadata
- Understand ShellBags, LNK Files, and Jump Lists
- Understand Text-based Logs and Windows Event Logs
- Collect Volatile Information in Linux
- Collect Non-volatile Information in Linux
- Understand Linux Memory Forensics
- Understand Mac Forensics
- Collect Volatile Information in Mac
- Collect Non-volatile Information in Mac
- Understand Mac Memory Forensics and Mac Forensics Tools
- Understand Network Forensics
- Summarize Event Correlation Concepts
- Identify Indicators of Compromise (IoCs) from Network Logs
- Investigate Network Traffic
- Perform Incident Detection and Examination Using SIEM Tools
- Understand Wireless Network Forensics
- Detect and Investigate Wireless Network Attacks
- Understand Malware Concepts
- Understand Malware Forensics
- Perform Static Malware Analysis
- Analyzing Suspicious Documents
- Perform System Behavior Analysis
- Perform Network Behavior Analysis
- Perform Ransomware Analysis
- Understand Web Application Forensics
- Understand Internet Information Services (IIS) Logs
- Understand Apache Web Server Logs
- Detect and Investigate Various Attacks on Web Applications
- Understand the Dark Web and Dark Web Forensics
- Determine How to Identify the Traces of Tor Browser during Investigation
- Perform Tor Browser Forensics
- Understand Cloud Computing Concepts
- Understand Cloud Forensics
- Understand Amazon Web Services (AWS) Fundamentals
- Perform AWS Forensics
- Understand Microsoft Azure Fundamentals
- Perform Microsoft Azure Forensics
- Understand Google Cloud Fundamentals
- Perform Google Cloud Forensics
- Understand Email Basics
- Explain Email Crime Investigation and its Steps
- Understand U.S. Laws Against Email Crime
- Explain Social Media Forensics
- Understand Mobile Device Forensics
- Understand Android and iOS Architecture, Boot Process, and File Systems
- Understand Mobile Forensics Process
- Investigate Cellular Network Data
- Perform File System Acquisition
- Understand Phone Locks, Rooting, and Jailbreaking of Mobile Devices
- Perform Logical Acquisition on Mobile Devices
- Perform Physical Acquisition on Mobile Devices
- Perform Android and iOS Forensic Analysis
- Understand IoT Concepts
- Perform Forensics on IoT Devices
Who it's for
Forensic analysts, incident responders, law enforcement and security professionals.
Before you start
- IT/forensics professionals with basic knowledge of IT/cybersecurity, computer forensics, incident response, and threat vectors.
Prepares for
Related courses
More in EC-Council →Foundation
Artificial Intelligence Essentials (AIE)
EC-Council
View course →Intermediate
Certified AI Program Manager (CAIPM)
EC-Council
View course →Intermediate
Certified Offensive AI Security Professional (COASP)
EC-Council
View course →Intermediate
Certified Responsible AI Governance & Ethics (CRAGE)
EC-Council
View course →Intermediate
EC-Council Certified Application Security Engineer (CASE).NET
EC-Council
View course →Intermediate
EC-Council Certified Chief Information Security Officer (C|CISO)
EC-Council
View course →Let's plan your next step together.
Tell us the course or certification you have in mind and we'll send the outline, upcoming dates, fees and private-team options.