EC-Council Computer Hacking Forensics Investigator (CHFI) v11

EC-Council’s C|HFI program prepares cybersecurity professionals with the knowledge and skills to perform effective digital forensics investigations and bring their organization into a state of forensic readiness. Establishing the forensics process, lab, evidence handling procedures, and investigation techniques are required to validate/triage incidents and point the incident response teams in the right direction. Forensic readiness is crucial as it can differentiate between a minor incident and a major cyber-attack that brings a company to its knees.

This intense hands-on digital forensics program immerses students in over 68 forensic labs, working on crafted evidence files utilizing the tools of the world’s top digital forensics professionals. Students will go beyond traditional hardware and memory forensics, covering current topics in cloud forensics, mobile and IoT, and investigating web application attacks and malware forensics. The C|HFI presents a methodological approach to computer forensics, including searching and seizing, chain-of-custody, acquisition, preservation, analysis, and reporting of digital evidence. Students learn various forensic investigation techniques and standard forensic tools. As they learn how to acquire and manage evidence through various operating environments, students also learn the chain of custody and legal procedures required to preserve evidence and ensure it is admissible in court, enabling the eventual prosecution of cyber criminals and containing liability on the victim organization.

By the end of this course, participants will be able to:

• Understand the fundamentals of computer forensics, digital evidence, and forensic readiness.

• Establish and operate a forensics lab, including tools, policies, and evidence handling procedures.

• Apply proper methodologies for acquisition, preservation, analysis, and presentation of digital evidence.

• Conduct in-depth forensic investigations across multiple platforms:

  • Windows, Linux, and Mac systems

  • Mobile devices and IoT environments

  • Cloud infrastructures and virtual environments

  • Web applications and malware incidents

• Perform data recovery, password cracking, log analysis, and email forensics.

• Utilize industry-standard forensic tools and techniques to investigate and document incidents.

• Follow chain-of-custody procedures and legal frameworks to ensure evidence is admissible in court.

• Support incident response teams by validating, triaging, and escalating cyber incidents.

• Law enforcement personnel

• Defense and military personnel

• e-Business security professionals

• Legal professionals

• Banking, insurance, and other professionals

• Government agencies

• IT managers

• Digital Forensics and Cybersecurity professionals

• Anyone concerned with the integrity of the network infrastructure

IT/forensics professionals with basic knowledge of IT/cybersecurity, computer forensics, incident response, and threat vectors.