Computer Hacking Forensic Investigator

The published domains and objectives for CHFI. Your missions come from these objectives, and your progress is recorded against them.

• 15%

  1

  Forensic Science

  • 1.0Cybercrime Types and Investigation Challenges
  • 1.1Computer Forensics Fundamentals and Investigator Responsibilities
  • 1.2Data Acquisition Concepts and Rules
  • 1.3Heterogeneous Digital-Evidence Source Fundamentals

• 10%

  2

  Regulations, Policies and Ethics

  • 2.0Search, Seizure, and Evidence Examination Rules
  • 2.1Laws and Legal Issues in Forensic Investigations
  • 2.2Computer Forensic Standards and Best Practices

• 18%

  3

  Digital Evidence

  • 3.0Digital Evidence Characteristics, Types, and Storage
  • 3.1Desktop and Mobile Operating Systems
  • 3.2Forensic Logs and Their Evidentiary Importance
  • 3.3Encoding Standards and File-Type Analysis
  • 3.4WAF and MySQL Database Fundamentals

• 17%

  4

  Procedures and Methodology

  • 4.0Forensic Investigation Process
  • 4.1Data Acquisition Methodology Across Evidence Types
  • 4.2eDiscovery Process
  • 4.3Image Examination, Timeline, and Event Correlation
  • 4.4Dark-Web and Malware Forensics

• 29%

  5

  Digital Forensics

  • 5.0Anti-Forensics and Data Recovery
  • 5.1Windows, Linux, and Android File Analysis
  • 5.2Network Log Analysis and Attack Forensics
  • 5.3Web Application Log and Attack Forensics
  • 5.4Database, Dark-Web, Email, Cloud, and IoT Forensics
  • 5.5Static and Dynamic Malware Analysis in a Sandbox
  • 5.6System, Network, Persistence, and Fileless Malware Analysis
  • 5.7Digital Forensics with Python

• 11%

  6

  Tools/Systems/Programs

  • 6.0Operating-System and Mobile Forensic Tools
  • 6.1Database, Cloud, Email, and IoT Forensic Tools
  • 6.2Network, Web, Cloud, Social, and Insider-Threat Forensic Tools