Computer Hacking Forensics Investigator – CHFI

Module 01: Computer Forensics in Today's World

• Fundamentals of Computer Forensics
• Cybercrimes and their Investigation Procedures
  Digital Evidence and eDiscovery
• Forensic Readiness
• Role of Various Processes and Technologies in Computer Forensics
• Roles and Responsibilities of a Forensic Investigator Challenges Faced in Investigating Cybercrimes
• Standards and Best Practices Related to Computer Forensics
• Laws and Legal Compliance in Computer
  Forensics

Module 02: Computer Forensics Investigation Process

• Forensic Investigation Process and its
  Importance
• First Response
• Pre-Investigation Phase
• Investigation Phase
• Post-Investigation Phase

Module 03: Understanding Hard Disks and File Systems

• Disk Drives and their Characteristics
• Logical Structure of a Disk
• Booting Process of Windows, Linux, and macOS Operating Systems
• File Systems of Windows, Linux, and macOS Operating Systems
• File System Analysis
• Storage Systems
• Encoding Standards and Hex Editors
• Analyze Popular File Formats

Module 04: Data Acquisition and Duplication

• Data Acquisition
• eDiscovery
• Data Acquisition Methodology
• Preparing an Image File for Examination

Module 05: Defeating Anti-Forensics Techniques

• Anti-Forensics Techniques
• Data Deletion and Recycle Bin Forensics
• File Carving Techniques and Ways to Recover Evidence from Deleted Partitions
• Password Cracking/Bypassing Techniques
• Steganography, Hidden Data in File System Structures, Trail Obfuscation, and File Extension
• Mismatch
• Techniques of Artifact Wiping, Overwritten Data/Metadata Detection, and Encryption
• Program Packers and Footprint Minimizing Techniques

Module 06: Windows Forensics

• Windows Forensics
• Collect Volatile Information
• Collect Non-volatile Information
• Windows Memory Analysis
• Windows Registry Analysis
• Electron Application Analysis
• Web Browser Forensics
• Examine Windows Files and Metadata
• ShellBags, LNK Files, and Jump Lists
• Text-based Logs and Windows Event Logs

Module 07: Linux and Mac Forensics

• Collect Volatile Information in Linux
• Collect Non-Volatile Information in Linux
• Linux Memory Forensics
• Mac Forensics
• Collect Volatile Information in Mac
• Collect Non-Volatile Information in Mac
• Mac Memory Forensics and Mac Forensics Tools

Module 08: Network Forensics

• Network Forensics
• Event Correlation
• Indicators of Compromise (loCs) from
  Network Logs
• Investigate Network Traffic
• Incident Detection and Examination
• Wireless Network Forensics
• Detect and Investigate Wireless Network Attacks

Module 09: Malware Forensics

• Malware
• Malware Forensics
• Static Malware Analysis
• Analyze Suspicious Documents
• System Behavior Analysis
• Network Behavior Analysis
• Ransomware Analysis

Module 10: Investigating Web Attacks

• Web Application Forensics
• Internet Information Services (IIS) Logs
• Apache Web Server Logs
• Detect and Investigate Various Attacks on Web Applications

Module 11: Dark Web Forensics

• Dark Web and Dark Web Forensics
• Identify the Traces of Tor Browser during Investigation
• Tor Browser Forensics

Module 12: Cloud Forensics

• Cloud Computing
• Cloud Forensics
• Amazon Web Services (AWS) Fundamentals
• AWS Forensics
• Microsoft Azure Fundamentals
• Microsoft Azure Forensics
• Google Cloud Fundamentals
• Google Cloud Forensics

Module 13: Email and Social Media Forensics

• Email Basics
• Email Crime Investigation and its Steps
• U.S. Laws Against Email Crime
• Social Media Forensics

Module 14: Mobile Forensics

• Mobile Device Forensics
• Android and iOS Architecture and Boot
  Process
• Mobile Forensics Process
• Investigate Cellular Network Data
• File System Acquisition
• Phone Locks, Rooting, and Jailbreaking of Mobile Devices
• Logical Acquisition on Mobile Devices
• Physical Acquisition of Mobile Devices
• Android and iOS Forensic Analysis

Module 15: IoT Forensics

• IoT Concepts
• IoT Devices Forensics

• Cybersecurity professionals
• Teams and organizations
• Government and military
• Educators

• Understand the fundamentals and methodologies of computer hacking and digital forensics.
• Learn how to identify, collect, preserve, examine, and analyze digital evidence.
• Develop practical skills for investigating cyberattacks, security breaches, and cybercrime incidents.
• Perform network, system, web, email, mobile, and cloud forensics.
• Learn techniques for malware analysis and forensic investigation.
• Understand dark web investigation and cryptocurrency-related forensic concepts.
• Apply forensic investigation procedures and evidence-handling practices to maintain evidence integrity.
• Gain hands-on experience through practical forensic labs and investigation scenarios.
• Develop skills relevant to incident response and cybercrime investigations.
• Prepare for the EC-Council Computer Hacking Forensic Investigator (CHFI) certification examination.
• Build career-ready capabilities for roles such as Digital Forensics Investigator, Computer Forensics Examiner, Incident Response Analyst, Forensic Analyst, and Cybersecurity Consultant.

• A basic understanding of IT and computer systems is recommended.
• Familiarity with networking and cybersecurity fundamentals is beneficial.
• Basic knowledge of operating systems, networks, and information security concepts can help learners understand the forensic techniques covered in the course.

• Exam Title: Computer Hacking Forensic Investigator
• Exam Code: 312-49
• Number of Questions: 150
• Availability: ECC EXAM Portal