EC-Council Computer Hacking Forensic Investigator® (CHFI® v11)

On this 5-day accelerated course, you'll learn to perform an effective digital forensics investigation. You'll also get the knowledge you need to identify an intruder's footprints and gather the necessary evidence to prosecute.

There's always an opportunity for a hacker to penetrate your system. When your organisation is hit by a cyber breach, the real issue is how you respond to the attack. The EC-Council C|HFI v11 certification course will teach you the entire digital forensics process. You'll get hands-on experience with various forensic investigation tools and techniques.

You’ll learn crucial computer forensics skills like:

• Searching and seizing
• Chain-of-custody
• Acquisition
• Preservation
• Analysis and reporting of digital evidence

This version of the CHFI (v11) addresses the latest forensics examination techniques, including Linux and MAC forensics. Additionally, this updated version dives in to the laws and standards surrounding digital forensics.

Firebrand's unique Lecture | Lab | Review technique combines both theoretical knowledge and key practical skills. You’ll be immersed in digital forensics as you participate in new CHFI v11 labs, centred around malware, database, cloud and anti-forensics techniques.

On this course, you'll be prepared for and sit the CHFI (312-49) exam. This is covered by your Certification Guarantee.

The Computer Hacking Forensic Investigator certification (CHFI) is aimed at top-level forensic and intrusion analysts, security operations personnel and systems/network administrators.

9x Accredited Training Centre of the Year

Firebrand Training has again won the EC-Council Accredited Training Centre of the Year Award, from a Training Partner network that has more than 700 training centres across 107 countries. This extends a record-breaking run of successive awards to nine years.

Jay Bavisi, President of EC-Council said: “The annual EC-Council Awards highlights the commitment and achievements of our global partners and trainers that have contributed to the information security community.”

EC-Council's CHFI certification is accredited by the American National Standard Institute (ANSI). Organisations with ANSI accreditation are required to undergo stringent quality reviews and assessments. EC-Council is one of just a handful of certification bodies to achieve ANSI accreditation.

You’ll get the skills you need to identify a cyber criminal, and gather the necessary evidence to prosecute. You'll also study the latest forensics tools and techniques.

• Module 01: Computer forensics in today's world
• Module 02: Computer forensics investigation process
• Module 03: Understanding hard disks and file systems
• Module 04: Data acquisition and duplication
• Module 05: Defeating Anti-forensics techniques
• Module 06: Windows forensics
• Module 07: Linux and Mac forensics
• Module 08: Network forensics
• Module 09: Malware forensics
• Module 10: Investigating Web attacks
• Module 11: Dark Web forensics
• Module 12: Cloud forensics
• Module 13: Email and social media forensics
• Module 14: Mobile forensics
• Module 15: IoT forensics

What is the EC-Council CHFI exam like? Who should take it, and what is the cost?

The EC-Council Certified Hacking Forensic Investigator (CHFI) exam focuses on the ability to gather evidence from digital systems, detect cybercrimes, and analyse compromised systems, all while ensuring the evidence is preserved for potential legal proceedings.

The CHFI exam consists of 150 scenario-based multiple-choice questions and takes 4 hours. According to EC-Council, it’s a moderately difficult exam that assesses your knowledge of digital forensics fundamentals and methodologies, file, disk, storage, and network forensics, web attacks, anti-forensic techniques, data recovery methods, incident response, and legal issues.

Achieving the CHFI certification is ideal for Digital Forensic Analysts, Incident Response Teams, Security Consultants, Cyber Security professionals, Ethical Hackers, Law Enforcement Officers, or legal personnel investigating digital crimes.

At Firebrand, the CHFI exam cost is included in the course fee; in addition, delegates also enjoy the Certification Guarantee: if they don't pass the exam the first time, they can take the course again for free within a year of their first one, only paying for accommodation, the exam, and incidental costs.

Should I take EC-Council CHFI or ECSA?

The EC-Council Certified Security Analyst course, also known as ECSA, has been replaced by the EC-Council Certified Penetration Testing Professional (CPENT).

CHFI helps you develop the skills you need to investigate cybercrimes and data breaches, including collecting and analysing digital evidence and performing forensic analysis on compromised systems. In contrast, with CPENT, you will be able to conduct penetration tests in real-world networks, web apps, IoT, cloud environments, and SCADA systems.

The answer depends on what you’re interested in. If you're more interested in investigating attacks and finding evidence, go for CHFI. If you want to be the one carrying out the attacks to test security systems, CPENT is the way to go.

You'll take the CHFI exam (312-49):

• Number of Questions: 150
• Passing Score: 70%
• Test Duration: 4 Hours
• Test Format: Multiple Choice

On this accelerated course, you'll get access to the following:

• Official EC-Council curriculum
• Computer Hacking Forensic Investigator courseware kit

When you achieve your CHFI certification, you will be awarded a digital badge. This can be downloaded from EC-Council’s Aspen Portal.

This accelerated program caters to students with introductory to intermediate experience in computer forensics. Students will walk away from this course with the information necessary to immediately conduct an examination of digital media.

It is strongly recommended that you attend the CEH class before attending CHFI.

Seven reasons why you should sit your course with Firebrand Training

• Two options of training. Choose between residential classroom-based, or online courses
• You'll be certified fast. With us, you’ll be trained in record time
• Our course is all-inclusive. A one-off fee covers all course materials, exams**, accommodation* and meals*. No hidden extras.
• Pass the first time or train again for free. This is our guarantee. We’re confident you’ll pass your course the first time. But if not, come back within a year and only pay for accommodation, exams and incidental costs
• You’ll learn more. A day with a traditional training provider generally runs from 9 am – 5 pm, with a nice long break for lunch. With Firebrand Training you’ll get at least 12 hours/day of quality learning time, with your instructor
• You’ll learn faster. Chances are, you’ll have a different learning style to those around you. We combine visual, auditory and tactile styles to deliver the material in a way that ensures you will learn faster and more easily
• You’ll be studying with the best. We’ve been named in the Training Industry’s “Top 20 IT Training Companies of the Year” every year since 2010. As well as winning many more awards, we’ve trained and certified over 135,000 professionals

*For residential training only. Doesn't apply for online courses
**Some exceptions apply. Please refer to the Exam Track or speak with our experts

Think you are ready for the course? Take a FREE practice test to assess your knowledge!  Free Practice Test