Duration
5 days
Overview
EC-Council’s Certified Hacking Forensic Investigator (CHFI) is the only comprehensive ANSI accredited, lab-focused program in the market that gives organizations vendor-neutral training in digital forensics. CHFI provides its attendees with a firm grasp of digital forensics, presenting a detailed and methodological approach to digital forensics and evidence analysis that also pivots around Dark Web, IoT, and Cloud Forensics. The tools and techniques covered in this program will prepare the learner for conducting digital investigations using ground-breaking digital forensics technologies.
The program is designed for IT professionals involved with information system security, computer forensics, and incident response. It will help fortify the application knowledge in digital forensics for forensic analysts, cybercrime investigators, cyber defense forensic analysts, incident responders, information technology auditors, malware analysts, security consultants, and chief security officers.
The program equips candidates with the necessary skills to proactively investigate complex security threats, allowing them to investigate, record, and report cybercrimes to prevent future attacks.
Why CHFI v10?
- EC-Council is one of the few ANSI 17024 accredited institutions globally that specializes in Information Security. The Computer Hacking Forensic Investigator (CHFI) credential is an ANSI 17024 accredited certification.
- The CHFI v10 program has been redesigned and updated after a thorough investigation into current market requirements, job tasks analysis, and the recent industry focus on forensic skills.
- It is designed and developed by experienced subject matter experts and digital forensics practitioners.
- CHFI v10 program includes extensive coverage of Malware Forensics processes, along with new modules such as Dark Web Forensics and IoT Forensics.
- It also covers detailed forensic methodologies for public cloud infrastructure, including Amazon AWS and Azure.
- The program is developed with an in-depth focus on Volatile data acquisition and examination processes (RAM Forensics, Tor Forensics, etc.).
- CHFI v10 is a complete vendor-neutral course covering all major forensics investigation technologies and solutions.
- CHFI has detailed labs for a hands-on learning experience. On average, 50% of training time is dedicated to labs, loaded on EC-Council’s CyberQ (Cyber Ranges).
- It covers all the relevant knowledge bases and skills to meet regulatory compliance standards such as ISO 27001, PCI DSS, SOX, HIPPA, etc.
- It comes with an extensive number of white papers for additional reading.
- The program presents a repeatable forensics investigation methodology from a versatile digital forensic professional, increasing employability.
- The courseware is packed with forensics investigation templates for evidence collection, the chain of custody, final investigation reports, etc.
- The program comes with cloud-based virtual labs, loaded on advanced Cyber Ranges, enabling students to practice various investigation techniques in real-time and realistically simulated environments.
Recommended Prerequisites
- IT/forensics professionals with basic knowledge of IT/cybersecurity, computer forensics, and incident response.
- Has knowledge of Threat Vectors.
Who Is It For?
The CHFI program is designed for all IT professionals involved with information system security, computer forensics, and incident response.
Target Audience
- Police and other law enforcement personnel
- Defense and Military personnel
- e-Business Security professionals
- Systems administrators
- Legal professionals
- Banking, Insurance and other professionals
- Government agencies
- IT managers
- Digital Forensics Service Providers
How you will benefit
A BREACH can be BRUTAL. Investing in building an expert in-house forensics team with CHFI training and certification is a strategic move for enterprises looking to safeguard their stakeholders’ interests as well as their own. CHFI empowers their existing team with learning the latest investigation practices.
- The course aligns with all the crucial forensic job roles across the globe.
- It is an ANSI 17024 accredited Certification Program, mapped to the NICE 2.0 framework.
- The course focuses on the latest technologies including IoT Forensics, Dark Web Forensics, Cloud Forensics (including Azure and AWS), Network Forensics, Database Forensics, Mobile Forensics, Malware Forensics (including Emotet and Eternal Blue), OS Forensics, RAM forensics and Tor Forensics, CHFI v10 covers the latest tools, techniques, and methodologies along with ample crafted evidence files.
Module 16: IoT Forensics
Course Agenda
Day 5
9:00am – 10:30am
Computer Forensics in Today’s World
Defeating Anti-Forensics Techniques
Network Forensics
Database Forensics
Malware Forensics
10:30am – 10:45am
Morning Break
10:45am – 12:30pm
Computer Forensics Investigation Process
Windows Forensics
Investigating Web Attacks
Cloud Forensics
Mobile Forensics
12:30pm – 1:30pm
Lunch Break
1:30pm – 3:30pm
Understanding Hard Disks and File Systems
Linux and Mac Forensics
Dark Web Forensics
Investigating Email Crimes
IoT Forensics
3:30pm – 3:45pm
Afternoon Break
3:45pm – 5:30pm
Data Acquisition and Duplication
Labs and exercises
About the Exam
The CHFI certification is awarded after successfully passing exam EC0 312-49. CHFI EC0 312-49 exams are available at ECC exam centers around the world.
CHFI Exam Details
- Number of Questions: 150
- Test Duration: 4 hours
- Test Format: Multiple choice
- Test Delivery: ECC exam portal
- Passing Score: In order to maintain the high integrity of our certification exams, EC-Council Exams are provided in multiple forms (i.e., different question banks). Each form is carefully analyzed through beta testing with an appropriate sample group under the purview of a committee of subject matter experts, ensuring that each of our exams is not only academically sound, but also has “real world” applicability. We apply an internal process to determine the difficulty rating of each question. The individual rating then contributes to an overall “Cut Score” for each exam form. To ensure each form has equal assessment standards, cut scores are set on a “per exam form” basis. Depending on which exam form is challenged, cut scores can range from 60% to 78%.
Programme scope, delivery arrangements and suitability are confirmed during enquiry.