All courses

EC-Council CHFI

Pass the CHFI (312-49): disk and device forensics built around the evidentiary chain — acquisition, imaging, file systems, operating-system artifacts and anti-forensics — taught so every finding is one you could defend. Satisfies the CSSP Infrastructure Support and Incident Responder roles.

Intermediate19 hours self-paced312-49

88 lessons · 15 hands-on labs. The first module is free — no card.

What the course covers

  1. 1

    Computer Forensics in Today's World

    6 lessons

    Free
  2. 2

    Computer Forensics Investigation Process

    7 lessons

    Subscription
  3. 3

    Understanding Hard Disks and File Systems

    6 lessons

    Subscription
  4. 4

    Data Acquisition and Duplication

    7 lessons

    Subscription
  5. 5

    Defeating Anti-Forensics Techniques

    6 lessons

    Subscription
  6. 6

    Windows Forensics

    7 lessons

    Subscription
  7. 7

    Linux and Mac Forensics

    6 lessons

    Subscription
  8. 8

    Network Forensics

    5 lessons

    Subscription
  9. 9

    Malware Forensics

    6 lessons

    Subscription
  10. 10

    Investigating Web Attacks

    5 lessons

    Subscription
  11. 11

    Dark Web Forensics

    5 lessons

    Subscription
  12. 12

    Cloud Forensics

    6 lessons

    Subscription
  13. 13

    Email and Social Media Forensics

    5 lessons

    Subscription
  14. 14

    Mobile Forensics

    6 lessons

    Subscription
  15. 15

    IoT Forensics

    5 lessons

    Subscription

What it qualifies you for

DCWF work roles this certification is an accepted option for.