Forensic Investigator

  • Home
  • Forensic Investigator


EC-Council’s Certified Hacking Forensic Investigator (CHFI) is that the only comprehensive ANSI accredited, lab-focused program within the market that provides organizations vendor-neutral training in digital forensics. CHFI provides its attendees with a firm grasp of digital forensics, presenting an in depth and methodological approach to digital forensics and evidence analysis that also pivots around Dark Web, IoT, and Cloud Forensics. The tools and techniques covered during this program will prepare the learner for conducting digital investigations using ground-breaking digital forensics technologies.

The program is meant for IT professionals involved data system security, computer forensics, and incident response. it`ll help fortify the appliance knowledge in digital forensics for forensic analysts, cybercrime investigators, cyber defense forensic analysts, incident responders, information technology auditors, malware analysts, security consultants, and chief security officers.

The program equips candidates with the required skills to proactively investigate complex security threats, allowing them to research , record, and report cybercrimes to stop future attacks.


Course Outline

Module 01: Computer Forensics in Today’s World
Module 02: Computer Forensics Investigation Process
Module 03: Understanding Hard Disks and File Systems
Module 04: Data Acquisition and Duplication
Module 05: Defeating Anti-Forensics Techniques
Module 06: Windows Forensics
Module 07: Linux and Mac Forensics
Module 08: Network Forensics
Module 09: Investigating Web Attacks
Module 10: Dark Web Forensics
Module 11: Database Forensics
Module 12: Cloud Forensics
Module 13: Investigating Email Crimes
Module 14: Malware Forensics
Module 15: Mobile Forensics
Module 16: IoT Forensics

The CHFI program is designed for all IT professionals involved with information system security, computer forensics, and incident response.

Target Audience

  1. Police and other law enforcement personnel
  2. Defense and Security personnel
  3. e-Business Security professionals
  4. Legal professionals
  5. Banking, Insurance, and other professionals
  6. Government agencies
  7. IT managers
  8. Digital Forensics Service Providers
  1. iLearn (Self-Study)
    This solution is an asynchronous, self-study environment that delivers EC-Council’s sought-after CHFI, digital forensics training courses in a streaming video format.
  2. Master Class
    This solution offers the opportunity to learn Certified Hacking Forensic Investigator from world-class instructors in collaboration with top digital forensics professionals.
  3. Training Partner (Instructor led training)
    CHFI v10 is available globally through EC-Council’s Authorized Training Partners. Conveniently located in your area, this offers you the benefit of learning from experienced certified EC-Council instructors along with your peers.
  4. Academia
    This solution offers CHFI v10 through EC-Council Academia Partner institutions and is for students enrolled in applicable college or university degree programs.

The CHFI certification is awarded after successfully passing exam EC0 312-49. CHFI EC0 312-49 exams are available at ECC exam centers around the world.
CHFI Exam Details

  1. Number of Questions: 150
  2. Test Duration: 4 hours
  3. Test Format: Multiple Choice
  4. Test Delivery: ECC exam portal
Passing Score

In order to maintain the high integrity of our certification exams, EC-Council Exams are provided in multiple forms (i.e., different question banks). Each form is carefully analyzed through beta testing with an appropriate sample group under the purview of a committee of subject matter experts, ensuring that each of our exams is not only academically sound, but also has “real world” applicability. We apply an internal process to determine the difficulty rating of each question. The individual rating then contributes to an overall “Cut Score” for each exam form. To ensure each form has equal assessment standards, cut scores are set on a “per exam form” basis. Depending on which exam form is challenged, cut scores can range from 60% to 85%.

Clause: Age Requirements and Policies Concerning Minors

The age requirement for attending the training or the exam is restricted to any candidate that is permitted by his/her country of origin/residency.

If the candidate is under the legal age as permitted by his/her country of origin/residency, they are not eligible to attend the official training or eligible to attempt the certification exam unless they provide the accredited training center/EC-Council a written consent/indemnity of their parent/legal guardian and a supporting letter from their institution of higher learning. Only candidates from a nationally accredited institution of higher learning shall be considered.