Digital forensics is critical to incident response, legal investigations, and regulatory compliance. This course develops participants’ ability to identify, preserve, analyse, and present digital evidence across diverse platforms. They will learn investigation techniques for compromised systems, data breaches, and cybercrime cases.
Learning Outcomes:
Understand digital forensics principles and investigation procedures
Recover and analyse evidence from operating systems and networks
Apply forensic tools to mobile, cloud, and encrypted environments
Document and present findings for legal and regulatory processes
Key Topics:
Forensics process and legal considerations
Evidence acquisition and chain of custody
File system analysis and malware forensics
Mobile device, cloud, and email investigations
Exam Details
This course is designed to build participants’ understanding of key concepts and domains covered in the EC-Council Computer Hacking Forensic Investigator (C|HFI) v11 certification.
| Exam duration | 4 hours |
| Number of questions | 150 |
| Question format | Multiple choice |
| Exam code | 312-49 |
| Delivery format | Online proctored exam |
To maximise success, participants are strongly encouraged to complement the course with additional self-study, revision of course materials, and dedicated practice before attempting the exam.
Module 01: Computer Forensics in Today’s World
Module 02: Computer Forensics Investigation Process
Module 03: Understanding Hard Disks and File Systems
Module 04: Data Acquisition and Duplication
Module 05: Defeating Anti-forensics Techniques
Module 06: Windows Forensics
Module 07: Linux and Mac Forensics
Module 08: Network Forensics
Module 09: Malware Forensics
Module 10: Investigating Web Attacks
Module 11: Dark Web Forensics
Module 12: Cloud Forensics
Module 13: Email and Social Media Forensics
Module 14: Mobile Forensics
Module 15: IoT Forensics