CHFI

Computer Hacking Forensic Investigator | CHFI

Computer Hacking Forensic Investigator | CHFI

The Computer Hacking Forensic Investigator (CHFI) course delivers the security discipline of digital forensics from a vendor-neutral perspective. CHFI is a comprehensive course covering major forensic investigation scenarios and enabling students to acquire necessary hands-on experience with various forensic investigation techniques and standard forensic tools necessary to successfully carry out a computer forensic investigation leading to the prosecution of perpetrators.

The CHFI certification gives participants (Law enforcement personnel, system administrators, security officers, defense and military personnel, legal professionals, bankers, security professionals, and anyone who is concerned about the integrity of the network infrastructure.) the necessary skills to perform an effective digital forensics investigation.

CHFI presents a methodological approach to computer forensics including searching and seizing, chain-of-custody, acquisition, preservation, analysis and reporting of digital evidence.

Course Outline

  • Computer Forensics in Today’s World
  • Computer Forensics Investigation Process
  • Understanding Hard Disks and File Systems
  • Operating System Forensics
  • Defeating Anti- forensics Techniques
  • Data Acquisition and Duplication
  • Network Forensics

  • Investigating Web Attacks
  • Database Forensics
  • Cloud Forensics
  • Malware Forensics
  • Investigating Email Crimes
  • Mobile Forensics
  • Investigative Reports

Course Descrption

  • The course was designed and developed by experienced SMEs and digital forensics practitioners
  • A complete vendor neutral course covering all major forensics investigations technologies and solutions
  • Detailed labs for hands-on learning experience; approximately 50% of training time is dedicated to labs
  • It covers all the relevant knowledge-bases and skills to meets with regulatory compliance standards such as ISO 27001, PCI DSS, SOX, HIPPA, etc
  • The program presents a repeatable forensics investigation methodology required from a versatile digital forensic professional which increases your employability

What You Will Learn

  • Establish threat intelligence and key learning points to support pro-active profiling and scenario modeling
  • Perform anti-forensic methods detection
  • Perform post-intrusion analysis of electronic and digital media to determine the who, where, what, when, and how the intrusion occurred
  • Extract and analyze of logs from various devices like proxy, firewall, IPS, IDS, Desktop, laptop, servers, SIM tool, router, firewall, switches AD server, DHCP logs, Access Control Logs & conclude as part of investigation process.
  • Identify & check the possible source / incident origin.
  • Recover deleted files and partitions in Windows, Mac OS X, and Linux
  • Conduct reverse engineering for known and suspected malware files
  • Collect data using forensic technology methods in accordance with evidence handling procedures, including collection of hard copy and electronic documents

Target Audience

The CHFI program is designed for all IT professionals involved with information system security, computer forensics, and incident response.

  • Police and other law enforcement personnel
  • Defense and Military personnel
  • e-Business Security professionals
  • Systems administrators
  • Legal professionals
  • Banking, Insurance and other professionals
  • Government agencies
  • IT managers

Meet your Instructor:

iLabs Demo:

Passing Score

In order to maintain the high integrity of our certification exams, EC-Council Exams are provided in multiple forms (I.e. different question banks). Each form is carefully analyzed through beta testing with an appropriate sample group under the purview of a committee of subject matter experts that ensure that each of our exams not only has academic rigor but also has “real world” applicability. We also have a process to determine the difficulty rating of each question. The individual rating then contributes to an overall “Cut Score” for each exam form. To ensure each form has equal assessment standards, cut scores are set on a “per exam form” basis. Depending on which exam form is challenged, cut scores can range from 60% to 78%.

Exam Name: CHFI EC0 312-49

Number of Questions: 150

Test Duration: 4 Hours

Test Format: Multiple Choice

Test Delivery: ECC Exam Portal

ANSIDoDNAVY COOLARMY COOLMARINE CORPS COOLAIR FORCE COOLGI BILL

EC-Council is dedicated to working with the US Department of Defense to bring the highest standards of Training, Education and Certification to our military.

Independent Accreditation ensures Quality of Certification

EC-Council Certifications are developed to the highest standards and have achieved numerous accreditations including ANSI 17024 for:

iclass
iclass

To get more information or still have questions:

DoD Directive 8570/ 8140

EC-Council’s Computer Hacking Forensics Investigator is an approved baseline certification for the following Cyber Security Service Provider sections:

iclass

CSSP Auditor

Information on DoD 8570 can be found at the following DISA website: https://public.cyber.mil/cwmp/dod-approved-8570-baseline-certifications/

Certification to Framework Mappings

A core component of EC-Council Certification development is the Job Task Analysis (JTA) Process we undertake before any certification is built. Major frameworks like the NICE/NIST Framework, NIST 800-171, GCHQ, and others contribute to content areas of each of our programs. As a result, EC-Council Certifications and Training programs are mapped to most major published Frameworks.

EC-Council Maps to the National Initiative for Cybersecurity Education Framework

Download the comprehensive mapping of EC-Council program sections to The Roles and their associated Knowledge, Skills and abilities.


EC-Council Cyber Security Certifications and the US NAVY

Six EC-Council Certifications are recognized by the United States Navy in over 100 Cyber Security Job roles, across 18 occupations. Ranging from Commander in Executive Cyberspace Leadership to Cyber Warfare Engineer, Special Agents, Incident Handlers, to Cryptologic Warfare Engineers, Cybersecurity careers with the US NAVY are exciting, holding an EC-Council certification provides great opportunity for advancement in a US NAVY career.

The decisions of Department of the NAVY to incorporate industry recognized certifications into the Cyber IT & Cyber Security Workforce Framework ensures as our service personnel advance their careers and eventually transition to civilian life, their skills and credentials are widely recognized by the Industries they will continue to work in as Veterans.

Certifications recognized, accepted, and often funded by the US NAVY include:

iclass

Funding opportunities for career advancement are available for Active Duty NAVY personnel through the NAVY COOL program.

US NAVY approves EC-Council Certifications across 18 Occupations and over 100 Job roles

Cryptologic Warfare LDO

  • Cryptologic Warfare LDO

CTN-Cryptologic Technician Networks

  • CTN – Global Network Operations Director
  • CTN – Global Network Operations Manager
  • CTN – Global Network Operations Technician

Cyber IT/CSWF Cyber Defense Infrastructure Support

  • CNDSP-IS
  • CPT Network Infrastructure Service Specialist
  • Systems Security Engineer

Cyber IT/CSWF Executive Cyberspace Leadership

  • Commander
  • Deputy Commander

Cyber IT/CSWF Security Program Management (CISO)

  • Chief Information Security Officer (CISO)
  • Common Control Provider
  • Cybersecurity Officer
  • Enterprise Security Officer
  • Facility Security Officer
  • Information Technology (IT) Director
  • Principal Security Architect
  • Risk Executive
  • Security Domain Specialist
  • Senior Agency Information Security (SAIS) Officer

Cyber IT/CSWF Vulnerability Assessment and Management

  • Blue Team Technician
  • Close Access Technician
  • CNDSP AU
  • Network Security Vulnerability Technician (NSVT)
  • Penetration Tester

Cryptologic Warfare Officer

  • Cryptologic Warfare Officer

Cyber IT/CSWF All Source Analysis

  • Computer Network Defense (CND) Analyst

Cyber IT/CSWF Cyber Operations Planning

  • CPT Operations Officer
  • CPT Platoon Leader
  • Network Warfare Cyber Planner

Cyber IT/CSWF Incident Response

  • CNDSP IR
  • Incident Handler
  • Intrusion Analyst
  • Network Security Vulnerability Technician (NSVT)

Cyber IT/CSWF Strategic Planning and Policy Development

  • Chief Information Officer (CIO)
  • Chief Information Security Officer (CISO)
  • Command Information Officer
  • Information Security Policy Analyst
  • Information Security Policy Manager
  • Policy Writer and Strategist
  • Cyberspace Workforce Developer and Manager (CSWF-PM) (DCWF Role Code 751)
  • Cyberspace Policy and Strategy Planner (DCWF Role Code 752)

Cyber Warfare Engineer

  • Cyber Warfare Engineer

Cryptologic Warfare Technician CWO

  • Cryptologic Warfare Technician CWO

Section 2Cyber IT/CSWF Cyber Defense Analysis

  • CNDSP Analyst
  • CNDSP Manager
  • CPT CND Manager
  • CPT Interactive Operator
  • CPT Systems Architect
  • Cyber Security Analyst
  • Incident Analyst

Cyber IT/CSWF Digital Forensics

  • Computer Forensic Analyst
  • Computer Network Defense (CND) Analyst
  • Digital Forensic Examiner
  • Digital Media Collector
  • Forensic Analyst
  • Forensic Analyst (Cryptologic)
  • Forensic Technician
  • Network Forensic Examiner

Cyber IT/CSWF Investigation

  • Computer Crime Investigator
  • Special Agent

Cyber IT/CSWF Threat Analysis

  • Computer Network Defense (CND) Analyst
  • Threat Analyst

Cyber Warrant Officer CWO

  • Cyber Warrant Officer CWO

*All information represented here can be found on the NAVY COOL site. To find what EC-Council Certifications map to your eligible Job role, select “Full Credential Search” then under Credential Agency, select or search for “International Council of E-Commerce Consultants”.

To get more information or still have questions:


EC-Council Cyber Security Certifications and the US ARMY

Five EC-Council Certifications are recognized by the United States ARMY across 15 occupations. Ranging from Cyber Operations Technician to Target Digital Network Analyst. Our certifications are in use as baseline credentials across ARMY Cyber throughout intelligence as well as deployed infantry. EC-Council is proud to work with various groups in the ARMY to support the Mission of ARMY Cyber.

Certifications recognized, accepted, and often funded by the US ARMY include:

iclass

Funding opportunities for career advancement are available for Active Duty ARMY personnel through the ARMY COOL program.

US ARMY approves EC-Council Certifications across 15 Occupations

  • Cryptologic Cyberspace Intelligence Collector – Analyst
  • CYBER Operations Technician
  • Information Protection Technician
  • Military Intelligence (MI) Systems Maintainer/Integrator
  • Senior Network Operations Technician
  • Cryptologic Cyberspace Intelligence Collector – Analyst
  • CYBER Operations Technician
  • Information Protection Technician

  • Military Intelligence (MI) Systems Maintainer/Integrator
  • Senior Network Operations Technician
  • Counterintelligence Agent
  • Cyber Operations Specialist
  • Infantryman
  • Information Technology Specialist
  • Nodal Network Systems Operator-Maintainer


To get more information or still have questions:


EC-Council Cyber Security Certifications and the Marine Corps

Five EC-Council Certifications are recognized by the United States Marine Corps in 79 Cyber Security Job roles, across 17 occupations. Ranging from Cyber Security Technician, to Signals Intelligence and Electronic Warfare Operator, to Cyber Security Chief.

Certifications recognized, accepted, and often funded by the US Marine Corps include:

iclass

Funding opportunities for career advancement are available for Active Duty MARINE CORPS personnel through the Marine COOL program.

US Marine Corps approves EC-Council Certifications across 15 Occupations

Aviation Logistics Information Management System (ALIMS) Specialist

  • Aviation Logistics Information Management System (ALIMS) Specialist

Cyber IT/CSWF Cyber Defense Analysis

  • CNDSP Analyst
  • CNDSP Manager
  • CPT CND Manager
  • CPT Interactive Operator
  • CPT Systems Architect
  • Cyber Security Analyst
  • Incident Analyst

Cyber IT/CSWF Investigation

  • Computer Crime Investigator
  • Special Agent

Cybersecurity Technician

  • Cybersecurity Technician

Cyber IT/CSWF All Source Analysis

  • Computer Network Defense (CND) Analyst

Signals Intelligence and Electronic Warfare Operator/Analyst

  • Signals Intelligence and Electronic Warfare Operator/Analyst

Communications Chief

  • Cyber Network Systems Chief
  • Telecommunications Systems Chief
  • Transmissions Chief

Cyber IT/CSWF Cyber Defense Infrastructure Support

  • CNDSP-IS
  • CPT Network Infrastructure Service Specialist
  • Systems Security Engineer

Cyber IT/CSWF Threat Analysis

  • Computer Network Defense (CND) Analyst
  • Threat Analyst

Information Security Technician

  • Information Security Technician

Cyber IT/CSWF Incident Response

  • CNDSP IR
  • Incident Handler
  • Intrusion Analyst
  • Network Security Vulnerability Technician (NSVT)

Signals Intelligence/Electronic Warfare Technician

  • Signals Intelligence/Electronic Warfare Technician

Cryptologic Cyberspace Analysts

  • Cryptologic Cyberspace Analysts

Cyber IT/CSWF Digital Forensics

  • Computer Forensic Analyst
  • Computer Network Defense (CND) Analyst
  • Digital Forensic Examiner
  • Digital Media Collector
  • Forensic Analyst
  • Forensic Analyst (Cryptologic)
  • Forensic Technician
  • Network Forensic Examiner

Cyber IT/CSWF Vulnerability Assessment and Management

  • Blue Team Technician
  • Close Access Technician
  • CNDSP AU
  • Network Security Vulnerability Technician (NSVT)
  • Penetration Tester

Intelligence Surveillance Reconnaissance (ISR) Systems Engineer

  • Intelligence Surveillance Reconnaissance (ISR) Systems Engineer

Cyber Security Chief

  • Cyber Security Chief
  • Cyber Network Operator
  • Cyber Network Systems Chief
  • Intelligence Surveillance Reconnaissance (ISR) Systems Engineer

To get more information or still have questions:

EC-Council Cyber Security Certifications and the US Air Force

Four EC-Council Certifications are recognized by the United States Air Force in 150 Cyber Security Job roles, across 8 occupations. Occupations are recognized in fields like; Cyber Transport Systems, Intelligence, and Cyber Warfare Operations.

Certifications recognized, accepted, and often funded by the US AIR FORCE include:

iclass

Funding opportunities for career advancement are available for Active Duty AIR FORCE personnel through the AIR FORCE COOL program.

Client Systems

  • Computer Operation Series
  • Computer Science Series
  • Cryptanalysis Series
  • Cryptography Series
  • Information Technology Management Series
  • Intelligence Series
  • Telecommunications Mechanic

Cyber Surety

  • Security Administration Series
  • Intelligence Series
  • Information Technology Management Series
  • Computer Science Series
  • Computer Operation Series
  • Security Administration Series

Cyber Transport Systems

  • Intelligence Series
  • Information Technology Management Series
  • Cryptography Series
  • Cryptanalysis Series
  • Computer Science Series
  • Computer Operation Series

Flight Engineer

  • Air Safety Investigating Series
  • Aircraft Attending
  • Aircraft Electrician
  • Aircraft Engine Mechanic
  • Aircraft Mechanic
  • Aircraft Operation Series
  • Aircrew Technician Series
  • Chief Electrician
  • Electrician
  • Electrician-Maintenance
  • Electronic Digital Computer Mechanic
  • Electronic Industrial Controls Mechanic
  • Electronic Integrated Systems Mechanic
  • Electronic Measurement Equipment Mechanic
  • Electronics Mechanic
  • Electronics Technical Series
  • Electronics Technician
  • Second Electrician
  • Third Electrician

Computer Systems Programming

  • Intelligence Series
  • Information Technology Management Series
  • Electronics Technician
  • Electronics Technical Series
  • Computer Science Series
  • Computer Operation Series

Cyber Systems Operations

  • Telecommunications Mechanic
  • Security Administration Series
  • Intelligence Series
  • Information Technology Management Series
  • Computer Science Series
  • Computer Operation Series
  • Computer Clerk and Assistant Series

Cyberspace Warfare Operations

  • Information Technology Management Series
  • Cryptography Series
  • Cryptanalysis Series
  • Computer Science Series
  • Computer Operation Series
  • Computer Clerk and Assistant Series

Fusion Analyst

  • Statistical Assistant Series
  • Intelligence Series
  • Information Technology Management Series
  • Computer Science Series

To get more information or still have questions:

Qualifying Chapter 31 (VR&E) United States Veterans may use their benefits to quickly study and attempt industry certifications and career training. Please click the “Contact Us” button below and enter “GI Bill” in the “Your Question” box. An EC-Council representative will contact you with more information regarding how we can support you.

To get more information or still have questions:

What’s New

  • Coverage of latest forensics examination techniques, including Linux and MAC Forensics
  • Labs on Defeating Anti-forensics Techniques, Database Forensics, Cloud Forensics and Malware Forensics

Add the Mobile Security Tool Kit to Your Training

For the past several years we have offered our training on a mobile device so that you can take your training with you and eliminate the need to stream the videos. This device is the next generation mobile device. This is a fully loaded pen test tool kit comes equipped with a custom Linux Hacking OS and, wait for it… we can load your course (or 2) onto the device. In the sage words of Ray Bradbury, “Something Wicked This Way Comes.”

Buy Self-Paced Training:

CHFI

Or choose a training option:

Still have questions?

1-888-330-HACK

Mon – Fri / 8:00 AM – 5:00 PM

Email Us

Join us for a free half-day of Computer Hacking Forensic Investigator (CHFI) through our new First Look Cybersecurity Learning Events!

Upcoming Live CHFI Training:

For Self-Paced, On-Demand training, click here