How Do I Become a Computer Forensics Investigator

EC-Council Computer Hacking Forensic Investigator (CHFI)

Level: Advanced
Exam: CHFI ECO 312-49


  • Cyber ​​crime investigation and related laws
  • Different types of evidence and review process
  • The "First Responder Toolkit" Securing, protecting and evaluating electronic crime
  • Recovery of deleted files and areas in Windows, Mac OS X and Linux
  • Use of steganography and access data from forensic toolkits
  • Password decryption and the investigation of password violations
  • Log collection and management
  • Investigation of logs, network traffic, wireless attacks and web attacks
  • Tracking emails and investigating email crime


Teaching the latest forensic techniques:

  • Modern computer forensics
  • Investigation processes
  • Seizing and searching computers
  • Digital evidence
  • First response procedures
  • Understanding hard disks and file systems
  • Forensics for Windows
  • Data acquisition and back-up
  • Recovering deleted files and partitions
  • Forensics investigation using AccessData forensic toolkit
  • Forensics investigation using EnCase
  • Steganography and image file forensics
  • Application password cracks
  • Log capturing and event correlation
  • Network forensics, investigating logs and investigating network traffic
  • Wireless attack investigation
  • Web attack investigation
  • Tracking emails and investigating email crimes
  • Mobile forensics
  • Investigative reporting
  • Becoming an expert witness

This course consists of (included in the price): Power workshop at a location of your choice, original EC-Council documents, exam on the last day, lunch and dinner, coffee breaks with fresh fruit, snacks, cold and warm drinks. The CHFI course is carried out by a certified EC-Council trainer.