Computer hacking forensic investigation is a process to detect hacking attacks and proper extraction of evidences to facilitate investigations. These evidences are very often instrumental for system integrity audits and prevention of similar future cyber-attacks.

As computer crimes are on the rise, good computer forensic practices can help organisations investigate attacks, detect system anomalies, or even help detect systems problems early to prevent future breach and loss of valuable digital assets.

The tools and techniques covered in this EC-Council Computer Hacking Forensic Investigator (CHFI) certification course will prepare students with the knowledge to conduct computer investigations with the latest groundbreaking digital forensics technologies.

Learning Outcomes

  • "Perform incident response and forensics
  • Perform electronic evidence collections
  • Perform digital forensic acquisitions
  • Perform bit-stream Imaging/acquiring of the digital media seized during the process of investigation
  • Examine and analyze text, graphics, multimedia, and digital images
  • Conduct thorough examinations of computer hard disk drives, and other electronic data storage media
  • Recover information and electronic data from computer hard drives and other data storage devices
  • Follow strict data and evidence handling procedures
  • Maintain audit trail (i.e., chain of custody) and evidence integrity
  • Work on technical examination, analysis and reporting of computer-based evidence
  • Prepare and maintain case files
  • Utilize forensic tools and investigative methods to find electronic data, including Internet use history, word processing documents, images and other files

Who should Attend?

  • Professionals from the Police, Military and related government agencies
  • IT Professionals who are or specialise in Information System Security, Computer Forensics, Incidence Response, Security Officers, Auditors, Security professionals or/and Site and Web Administrators
  • Anyone from the general public who is concerned with cyber system security and forensic investigations are also welcome to attend the CHFI course

Eligibility Criteria

  • IT Professionals
  • Management Systems
  • Information security management
This course is endorsed under Critical Infocomm Technology Resource Programme Plus (CITREP+) Programme.
To find out more about CITREP+ Funding, please refer to Programme Support under CITREP+ page

Information is accurate as of 6 August 2020