Computer Hacking Forensic Investigator (C|HFI)
The Computer Hacking Forensic Investigator (C|HFI) is EC-Council’s industry-leading program that equips cybersecurity professionals with the knowledge and skills to perform effective digital forensics investigations and accomplish forensic readiness. It covers the methodological approach to forensics — from evidence handling and chain-of-custody to acquisition, preservation, analysis, and reporting — ensuring evidence is admissible in court.
Audience Profile
The C|HFI is built for professionals involved in investigating and responding to cybercrimes:
- Cybersecurity Professionals — Looking to specialise in digital forensics and DFIR
- Law Enforcement & Government — Trusted and recognised by defence and government bodies worldwide
- Incident Response Teams — Professionals who validate and triage security incidents
- IT & Security Analysts — With basic knowledge of IT, cybersecurity, or forensics
What will you learn?
The 15-module program includes:
- Computer Forensics Fundamentals — Investigation process, digital evidence & legal compliance
- Data Acquisition & Analysis — Disk drives, file systems, eDiscovery & image preparation
- Anti-Forensics — Detecting and countering anti-forensic techniques
- OS Forensics — Windows, Linux & Mac volatile/non-volatile data & registry analysis
- Network & Cloud Forensics — Traffic analysis, incident detection, AWS, Azure & GCP forensics
- Malware Forensics — Static/dynamic analysis, ransomware investigation (including BlackCat/ALPHV)
- Web & Dark Web Forensics — Web attack investigation, Tor browser forensics
- Mobile & IoT Forensics — Android/iOS acquisition, SIM analysis, IoT device investigation
- Email & Social Media Forensics — Email crime investigation, social media evidence extraction
Why Get Certified?
- 68 Hands-On Labs — Immersive, real-world forensic lab experience
- 600+ Forensic Tools — Work with the tools used by top digital forensics professionals
- Six-Figure Salary — Ranked as the only digital forensics certification in the U.S. with an average six-figure salary Infosec Institute
- DoD Approved — Accredited under ANAB ISO/IEC 17024 and approved by the U.S. DoD 8140
- 31 Job Roles — Maps to roles including Digital Forensics Analyst, Malware Analyst, Cybercrime Investigator, and more
-
Prerequisites
IT and forensics professionals must possess a basic understanding of IT/cybersecurity, computer forensics, and incident response to enroll in the C|HFI program. While no formal prerequisites are enforced, foundational IT or security knowledge is strongly recommended.