CHFI Computer Hacking
Forensic Investigator

Complete syllabus (v12/v13 aligned) – Evidence acquisition, disk forensics, mobile/cloud/network forensics, malware analysis, and legal reporting. Hands-on with real tools.

16 Advanced Modules 20+ Forensic Tools Live Case Studies EC-Council CHFI Prep
16
Core Modules
30+
Forensic Tools
100%
Practical Labs
CHFI
Global Certification
📘 Detailed CHFI Syllabus
Module 01
Computer Forensics Today
  • Digital forensics introduction
  • Cybercrime types & investigation process
  • Role of forensic investigator
  • Legal compliance & regulations
Module 02
Investigation Process
  • Evidence identification & collection
  • Chain of custody protocols
  • Forensic imaging techniques
  • Documentation & reporting
Module 03
Hard Disks & File Systems
  • Disk structure (MBR, GPT)
  • FAT, NTFS, EXT file systems
  • Data storage & slack space
Module 04
Data Acquisition
  • Disk imaging (bit-by-bit)
  • Live vs dead acquisition
  • FTK Imager, EnCase
FTK ImagerEnCase
Module 05
Recovering Deleted Files
  • File carving techniques
  • Formatted drive recovery
  • Hidden data detection
Module 06
Windows Forensics
  • Registry analysis & artifacts
  • Event logs investigation
  • User activity tracking
Module 07
Linux & Mac Forensics
  • EXT file system analysis
  • Log file forensics (syslog, auth)
  • MacOS artifacts (plist, Spotlight)
Module 08
Mobile Forensics
  • Android & iOS extraction
  • Logical / physical acquisition
  • SMS, call logs, app data
  • Cellebrite, Magnet AXIOM
Module 09
Network Forensics
  • Packet capture & analysis
  • IDS/IPS log monitoring
  • Wireshark, tcpdump
Module 10
Cloud Forensics
  • Cloud models (IaaS/PaaS/SaaS)
  • Evidence collection in cloud
  • AWS/Azure forensic logs
Module 11
Malware Forensics
  • Malware behavior & types
  • Static & dynamic analysis
  • Reverse engineering basics
  • Volatility, Ghidra
Module 12
Email Forensics
  • Email header analysis
  • SPF, DKIM, DMARC
  • Phishing investigation
Module 13
Web Forensics
  • Browser artifacts (cache, history)
  • Web attack investigation
  • Web server logs analysis
Module 14
Database Forensics
  • DB structure & transaction logs
  • SQL attack investigation
  • Data recovery from DB
Module 15
Dark Web & Crypto Forensics
  • Dark web investigation (Tor, I2P)
  • Cryptocurrency tracking
  • Blockchain analysis basics
Module 16
Report Writing & Legal
  • Forensic report structure
  • Court testimony & evidence
  • Legal procedures & ethics
🛠️ Forensic Toolkit Mastery
EnCase FTK Autopsy / Sleuth Kit Wireshark Cellebrite UFED Volatility X-Ways Magnet AXIOM Ghidra / IDA FTK Imager
🎯 Career Opportunities
Digital Forensic Analyst
Cyber Crime Investigator
Incident Response Analyst
SOC Analyst
Forensic Consultant
Malware Analyst

CHFI Certification Preparation + Placement Support

Hands-on labs with real evidence, mock investigations, expert mentors. Limited seats – enroll now for upcoming batch.

✅ PDF ready: Use browser print to save as PDF