Skip to content
AuditHive
EC-Council

Computer Hacking Forensic Investigator (CHFI)

Format

Self-paced (eLearning)

Vendor

EC-Council

Course Price

$2,199

Enrollment opens a secure Stripe checkout.

Computer Hacking Forensic Investigator (CHFI)

Overview

Develop digital investigation skills with EC-Council’s CHFI program. Study evidence preservation, acquisition, analysis, and reporting across systems and devices while considering chain of custody and the needs of an investigation.

This AuditHive offering uses self-paced EC-Council iLearn training. Complete the learning on your own schedule and use website checkout to complete and confirm enrollment.

Check the official course provider course and credential requirements for the current syllabus, exam and certification criteria.

Curriculum

  1. Getting started

    • Review the course structure and relevant foundation concepts.
    • Plan time for independent study and practical work.

  2. Computer Forensics & Investigation Process

    • Digital Forensics Fundamentals – Introduction, forensic methodology
    • Evidence Handling – Chain of custody, legal considerations
    • First Responder Procedures – Scene preservation, documentation
    • Lab – Forensic workstation setup and imaging

  3. Hard Disks, File Systems & Data Acquisition

    • Hard Disk Forensics – File systems, partition analysis, data recovery
    • File System Analysis – NTFS, FAT, EXT, HFS+ examination
    • Data Acquisition – Imaging tools, write blockers, verification
    • Lab – Disk imaging and file carving

  4. Anti-Forensics, Windows & Linux Forensics

    • Windows Forensics – Registry, event logs, artifacts
    • Linux/Mac Forensics – Log analysis, user artifacts
    • Memory Forensics – RAM acquisition, process analysis
    • Lab – Windows registry and memory analysis

  5. Network, Web, Dark Web & Cloud Forensics

    • Network Forensics – Packet capture, traffic analysis, intrusion detection
    • Web & Email Forensics – Browser artifacts, email headers
    • Mobile Forensics – iOS/Android acquisition, app analysis
    • Lab – Network traffic and mobile device analysis

  6. Malware, Mobile, IoT & Final Assessments

    • Malware Forensics – Static/dynamic analysis, indicators of compromise
    • Cloud Forensics – AWS/Azure artifacts, SaaS investigation
    • Forensic Reporting – Documentation, expert testimony preparation
    • Exam Review – Practice exam, CHFI certification guidance

Who Should Attend & Prerequisites

Who should attend

Cybersecurity professionals, forensic investigators, security analysts, IT auditors, and law enforcement personnel interested in digital forensics.

Prerequisites

A working knowledge of operating systems, networks, and cybersecurity is recommended. Experience in security operations, IT administration, or investigations provides useful context. Confirm EC-Council’s current exam eligibility rules for your training route.

Learning Outcomes

  • Plan evidence handling and preservation for a digital investigation.
  • Interpret artifacts from systems, networks, and other digital sources.
  • Document examination steps and findings in a forensic report.

Exam and credential requirements

CHFI certification requires passing the relevant exam and meeting EC-Council’s applicable requirements. Training does not itself authorize investigative work or establish that evidence will be admissible in a particular proceeding. Renewal and continuing education requirements are set by EC-Council and depend on the credential.

What's Included

  • Self-paced EC-Council iLearn training
  • Official digital course materials
  • The course examination voucher, subject to applicable eligibility requirements

Confirm the assigned course version, access period, practical resources, and voucher terms in your enrollment information. Contact training@auditpartners.com before checkout if you need a specific access period or package feature.

Related Courses