Certification Introduction
CHFI which stands for Computer Hacking Forensic Investigation is a certification related to hacking and is offered by EC-Council. The ethical hacking attacks and the relevant countermeasures are included mainly in this certification. Moreover, its aim is to teach the learners about the conduction of audits such that future crimes and hacking attacks can be prevented as well as crimes can be reported via proper channel. Altogether, the hand on practical experience as well as the various tools used during the certification will make the attendees capable to conduct investigations of the computers by making use of the technologies for digital forensics.
Through this certification, the candidate is validated for his or her skills in the domain of digital forensics such that it checks whether the candidate is able to analyze and identify the footprints of intruders and in case of any unpleasant event how he/she prosecute the case and collect the necessary evidence. Right now, the demand of digital forensics graduates is very high and competitive salary ranging between 85,000 dollars and 120,000 dollars are commonly offered to such certified candidates. The exam of CHFI certification consists of 150 questions which have to be answered in 4 hours duration, while the passing criterion is 70 percent.
Related Exams
CHFI version 8 is the most advance and related certification in the domain of computer forensic investigation. The evidence analysis and computer forensics based methodological approach is followed in this certification, which is taught in the form of a comprehensive course.
Certification Objectives
CHFI certification is based on the critical issues faced in the world of illegal misuse of computers and sensitive information; hence, CHFI mainly teaches computer forensics techniques and skills through which the candidates can analyze the techniques and perform computer investigation for the identification of legal and potential evidence. The skills to discover the data which either resides inside the computer in any form i.e. encrypted, deleted or damaged, as well as the data which can be recover using data recovery tools is developed in the CHFI investigators. The major objective is to teach the candidates about:
- Investigation of wireless attacks and network forensics including network traffic and logs investigation
- Event co relation and log capturing
- Application password cracking
- Steganography
- Image file forensics
- Perform forensics investigations by the help of relevant tools
- Recover deleted partitions and files
- Forensics of the windows
- Investigation of the digital evidence
- Understanding the file systems and hard disks and learn how to seize the computer and search data in it
- Relevant laws in the process of crime investigation and how to obtain a search warrant.
Thus, the candidate wills learn how the footprints of the intruder who is trying to access some computer system illegally is identified. Security professionals can apply these skills while working for any high profile and sensitive institutions where security might be a risk.
Certification Information
Re-certification
The CHFI (Computer Hacking Forensic Investigation) certification is primarily valid for the period of three years. The certification can be renewed in case of expiration and for this the candidate is required to maintain the minimum credit of 120 points.
Exam prerequisites
There is an 18 year age restriction on the candidate applying for this certification; otherwise, he/she is not eligible to attend the certification exams and official training. Moreover, it is recommended to attend the certified ethical hacking course prior to do this certification for better learning and performance in exam.
Skills and Benefits
After successfully completing this certification, the CHFI investigator knows the ways and methods to investigate the cyber crime. Furthermore, log management, investigation of digital evidence and email crime, recover deleted files and various password cracking concepts are also the skills which the candidates learn as an outcome.
What's next?
The security professionals after successfully learning the forensics investigation techniques through this generalized an holistic certification i.e. Computer Hacking Forensics Investigator, can further do certifications according to different high level versions which EC-Council keeps on releasing from time to time. Right now, version 8 is the latest version and new comprehensive versions of this certification are expected to be released in the future as well.
