MasterClass Computer Forensics Program

MasterClass Computer Forensics Program

Computer Forensics is one of the fastest growing sectors in the cybersecurity landscape. EC-Council MasterClass has developed a combined program to give students a leg up!

Incident response and forensic analysis are related disciplines that can leverage similar tools and related data sets and since incident response is often considered a subset of the broader computer forensic discipline, EC-Council MasterClass is bundling both the Computer Hacking Forensic Investigator (CHFI) and the Certified Incident Handler (CIH) courses.

“As of Dec 29, 2019, the average annual pay for a Computer Forensics Analyst in the United States is $99,014 a year. -ZipRecruiter”

“A Cyber Incident Responder typically a median salary of $106,000. -Career Builder”

The MasterClass Package Includes:

Computer Hacking Forensic Investigator Course (CHFI):

  • Computer Hacking Forensic Investigator Course (CHFI) Live Course -
    • CHFI Printed Courseware (US courses Only)
    • CHFI iLabs, Live Labs
    • CHFI Certification Exam
    • Exam Insurance Program - $499
  • CHFI Online Self-Paced Streaming Video Course (1 year access) -


Certified Incident Handler/Response

  • Certified Incident Handler/Response (ECIH) Online Self-Paced Streaming Video Course (1 year access) -
    • ECIH E-Courseware
    • ECIH iLabs, Live Labs
    • ECIH Certification Exam
    • Exam Insurance Program - $450


Computer Forensic
Deep Dives:

  • Dark Web Forensics Deep Dive - Self-Paced streaming video with access for one year -
  • Memory Forensics Deep Dive - Self-Paced streaming video access for one year -
  • Mobile Forensics Deep Dive - Self-Paced streaming video access for one year -


Cybersecurity *Meet Up Networking Event (Priceless)

*Meet-ups are subject to availability, space, instructor schedules, and local interest. For live in person only.

20% OFF Voucher for next course

Total Value:

Package Rate:

Ready to get started?

Select the location you are interested in to see upcoming training dates.

Why MasterClass?

The Most Robust

The MasterClass Computer Forensics Program includes two industry recognized certification courses
and three computer Forensic Deep Dives:

  • Computer Hacking Forensic Investigator (CHFI)
  • Certified Incident Handler (CIH)

  • Dark Web Forensics Deep Dive
  • Memory Forensics Deep Dive
  • Mobile Forensics Deep Dive

The Most Labs

  • CHFI
    • 40 Exercises
    • Approximately 14 Hours

  • ECIH
    • 48 Exercises
    • Approximately 10 Hours

Exam Insurance Program

Here at Masterclass we know that test taking can be very stressful, so we have developed a program to put your mind at ease.

While no one can guarantee that you will pass the exam, we can offer you Exam Insurance: If you fail either certification exam included in this program on the first attempt, EC-Council will pay for the next attempt. Any further attempts can be purchased at the reduced “retake” rate.

Who Should Attend?

  • Police and other law enforcement personnel
  • Defense and Military personnel
  • e-Business Security professionals
  • Systems administrators

  • Legal professionals
  • Banking, Insurance and other professionals
  • Government agencies
  • IT managers

About Computer Hacking Forensic Investigator (CHFI)

CHFI Course Outline

  • Computer Forensics in Today’s World
  • Computer Forensics Investigation Process
  • Understanding Hard Disks and File Systems
  • Operating System Forensics
  • Defeating Anti- forensics Techniques
  • Data Acquisition and Duplication
  • Network Forensics

  • Computer Forensics in Today’s World
  • Computer Forensics Investigation Process
  • Understanding Hard Disks and File Systems
  • Operating System Forensics
  • Defeating Anti- forensics Techniques
  • Data Acquisition and Duplication
  • Network Forensics

Course Description

  • The course was designed and developed by experienced SMEs and digital forensics practitioners
  • A complete vendor neutral course covering all major forensics investigations technologies and solutions
  • Detailed labs for hands-on learning experience; approximately 50% of training time is dedicated to labs
  • It covers all the relevant knowledge-bases and skills to meets with regulatory compliance standards such as ISO 27001, PCI DSS, SOX, HIPPA, etc
  • The program presents a repeatable forensics investigation methodology required from a versatile digital forensic professional which increases your employability

What’s New

  • Coverage of latest forensics examination techniques, including Linux and MAC Forensics
  • Labs on Defeating Anti-forensics Techniques, Database Forensics, Cloud Forensics and Malware Forensics

What You Will Learn

  • Establish threat intelligence and key learning points to support pro-active profiling and scenario modeling
  • Perform anti-forensic methods detection
  • Perform post-intrusion analysis of electronic and digital media to determine the who, where, what, when, and how the intrusion occurred
  • Extract and analyze of logs from various devices like proxy, firewall, IPS, IDS, Desktop, laptop, servers, SIM tool, router, firewall, switches AD server, DHCP logs, Access Control Logs & conclude as part of investigation process.
  • Identify & check the possible source / incident origin.
  • Recover deleted files and partitions in Windows, Mac OS X, and Linux
  • Conduct reverse engineering for known and suspected malware files
  • Collect data using forensic technology methods in accordance with evidence handling procedures, including collection of hard copy and electronic documents

Meet your Instructor:

iLabs Demo:

Passing Score

In order to maintain the high integrity of our certification exams, EC-Council Exams are provided in multiple forms (I.e. different question banks). Each form is carefully analyzed through beta testing with an appropriate sample group under the purview of a committee of subject matter experts that ensure that each of our exams not only has academic rigor but also has “real world” applicability. We also have a process to determine the difficulty rating of each question. The individual rating then contributes to an overall “Cut Score” for each exam form. To ensure each form has equal assessment standards, cut scores are set on a “per exam form” basis. Depending on which exam form is challenged, cut scores can range from 60% to 78%.

Exam Details

Exam Name: CHFI EC0 312-49

Number of Questions: 150

Test Duration: 4 Hours

Test Format: Multiple Choice

Test Delivery: ECC Exam Portal

About ECIH

The EC-Council Certified Incident Handler (ECIH) program focuses on a structured approach for performing the incident handling and response (IH&R) process. The IH&R process includes stages like incident handling and response preparation, incident validation and prioritization, incident escalation and notification, forensic evidence gathering and analysis, incident containment, systems recovery, and incident eradication. This systematic incident handling and response process creates awareness among incident responders in knowing how to respond to various types of security incidents.

About the Computer Forensics Deep Dive Workshops

Dark Web Forensics Deep Dive Workshop

In this workshop you will be given a tour of the dark web and walked through the technical details of how it works. You will get hands on experience conducting dark web investigations. This includes how to identify relevant information and how to investigate it.

The Malware and Memory Forensics Deep Dive Workshop

In this workshop, you will learn details of how malware functions, and how it is categorized. Then you will be shown details of the structure of memory, and how memory works. There is plenty of hands-on memory forensics. You will learn how to analyze memory to find evidence of malware.

The Mobile Forensic Deep Dive Workshop

This workshop will show you how to conduct such investigations. You will learn mobile phone architecture, how to use phone forensics tools and open-source tools. There will be a strong focus on Android phones, including how to use the Android Debugging Bridge to perform forensics.

Cybersecurity Meet Up (for live in-person only)

Due to COVID-19, the meet up events have been cancelled/postponed.

EC-Council will host a live meet up the Wednesday evening of the course. The Meet up will be kicked off with a demo presentation given by the instructor and/or a local industry leader. Cybersecurity professionals from all over the region will be invited to network with industry professionals.

Train now, pay later with Affirm.