Overview

Duration: 5 days / 40 Hours

Digital forensic practices stem from forensic science, the science of collecting and examining evidence or materials. Digital or computer forensics focuses on the digital domain including computer forensics, network forensics, and mobile forensics. As the cyber security profession evolves, organizations are learning the importance of employing digital forensic practices into their everyday activities. Computer forensic practices can help investigate attacks, system anomalies, or even help System administrators detect a problem by defining what is normal functional specifications and validating system information for irregular behaviors.In the event of a cyber-attack or incident, it is critical investigations be carried out in a manner that is forensically sound to preserve evidence in the event of a breach of the law. Far too many cyber-attacks are occurring across the globe where laws are clearly broken and due to improper or non-existent forensic investigations, the cyber criminals go either unidentified, undetected, or are simply not prosecuted.Cyber Security professionals who acquire a firm grasp on the principles of digital forensics can become invaluable members of Incident Handling and Incident response teams. The Computer Hacking Forensic Investigator course provides a strong baseline knowledge of key concepts and practices in the digital forensic domains relevant to today’s organizations. CHFI provides its attendees a firm grasp on the domains of digital forensics.

Objectives

CHFI v9 covers detailed methodological approach to computer forensic and evidence analysis. It provides the necessary skillset for identification of intruder’s footprints and gathering necessary evidence for its prosecution. All major tools and theories used by cyber forensic industry are covered in the curriculum.

The certification can fortify the applied knowledge level of law enforcement personnel, system administrators, security officers, defense and military personnel, legal professionals, bankers, computer and network security professionals, and anyone who is concerned about the integrity of the network and digital investigations.

Content

• Includes critical modules in Dark WebForensics and IoT Forensics
• Extensive coverage of Malware Forensics (latest malware samples such as Emotet and EternalBlue)
• Significant coverage of forensic methodologies for public cloud infrastructure, including Amazon AWS and Microsoft Azure
• More than 50GB of crafted evidence files for investigation purposes
• More than 50% of new and advanced forensic labs
• Massive updates on all modules in CHFI
• Latest forensic tools including Splunk, DNSQuerySniffer, etc.
• In-depth focus on Volatile and Non-volatile data acquisition and examination process (RAM Forensics, Tor Forensics, etc.)
• New techniques such as Defeating Anti-forensic technique, Windows ShellBags including analyzing LNK files and Jump Lists
• Massive updates on all modules in CHFI
• Accepted and trusted by cybersecurity practitioners across the Fortune 500 globally

Audience

• Anyone interested in cyber forensics/investigations
• Attorneys, legal consultants, and lawyers
• Law enforcement officers
• Police officers
• Federal/ government agents
• Defense and military
• Detectives/ investigators
• Incident response team members
• Information security managers
• Network defenders
• IT professionals, IT directors/ managers
• System/network engineers
• Security analyst/ architect/ auditors/ consultants

Prerequisites

• IT/forensics professionals with basic knowledge on IT/cyber security, computer forensics, and incident response
• Prior completion of CEH training would be an advantage

Certification

The CHFI certification is awarded after successfully passing the exam EC0 312-49. CHFI EC0 312-49 exams are available at ECC exam center around the world.

CHFI Exam Details

• Number of Questions: 150
• Test Duration: 4 hours
• Test Format: Multiple choice
• Test Delivery: ECC exam portal