• Online, Instructor-Led
  • Classroom
Course Description

The CHFI training course is a comprehensive program designed to equip professionals with advanced skills in computer forensics investigation. This course covers a wide range of topics, including computer forensics fundamentals, cybercrime investigation procedures, data acquisition techniques, and analysis of various operating systems and devices. Participants will learn how to handle digital evidence, conduct thorough investigations, and use forensic tools to analyze different types of cyber incidents.

Learning Objectives

1. Understand computer forensics fundamentals and cybercrime investigation procedures 2. Learn various phases of the computer forensics investigation process 3. Gain knowledge of different disk drives, file systems, and storage systems 4. Master data acquisition techniques and eDiscovery processes 5. Identify and counter anti-forensics techniques 6. Perform volatile and non-volatile data acquisition in Windows, Linux, and Mac operating systems 7. Conduct network forensics and analyze network traffic 8. Perform malware forensics and analyze system behavior 9. Investigate web application attacks and analyze web server logs 10. Understand cloud forensics and investigate cloud-based incidents 11. Conduct email and social media forensics 12. Perform mobile device forensics on Android and iOS platforms 13. Understand IoT forensics processes and challenges

Framework Connections

The materials within this course focus on the NICE Framework Task, Knowledge, and Skill statements identified within the indicated NICE Framework component(s):

Work Roles

Feedback

If you would like to provide feedback on this course, please e-mail the NICCS team at NICCS@hq.dhs.gov. Please keep in mind that NICCS does not own this course or accept payment for course entry. If you have questions related to the details of this course, such as cost, prerequisites, how to register, etc., please contact the course training provider directly. You can find course training provider contact information by following the link that says “Visit course page for more information...” on this page.