Computer Hacking Forensic Investigator

Computer hacking forensic investigation  is the  process of detecting hacking attacks and properly extracting evidence to report the crime and conduct audits to prevent future attacks. Computer forensics is simply the application of computer investigation and analysis techniques in the interests of determining potential legal evidence. Evidence might be sought in a wide range of computer crime or misuse, including but not limited to theft of trade secrets, theft of or destruction of intellectual property, and fraud. CHFI investigators can draw on an array of methods for discovering data that resides in a computer system, or recovering deleted, encrypted, or damaged file information.

Securing and analyzing electronic evidence is a central theme in an ever-increasing number of conflict situations and criminal cases. Electronic evidence is critical in the following situations:

• Disloyal employees
• Computer break-ins
• Possession of pornography
• Breach of contract
• Industrial espionage
• E-mail Fraud
• Bankruptcy
• Disputed dismissals
• Web page defacements
• Theft of company documents

Computer forensics enables the systematic and careful identification of evidence in computer related crime and abuse cases. This may range from tracing the tracks of a hacker through a client’s systems, to tracing the originator of defamatory emails, to recovering signs of fraud.

The CHFI course will provide participants the necessary skills to identify an intruder’s footprints and to properly gather the necessary evidence to prosecute in the court of law.

The CHFI course will benefit:

• Police and other law enforcement personnel
• Defense and Military personnel
• e-Business Security professionals
• Systems administrators
• Legal professionals
• Banking, Insurance and other professionals
• Government agencies
• IT managers

Exams

The CHFI certification is awarded after successfully passing the exam EC0 312-49, which are available at Prometric, VUE and Prometric Prime centers.

Course Outline

• Module 01: Computer Forensics in Today’s World
• Module 02: Law and Computer Forensics
• Module 03: Computer Investigation Process
• Module 04: First Responder Procedure
• Module 05: CSIRT
• Module 06: Computer Forensic Lab
• Module 07: Understanding File Systems and Hard Disks
• Module 08: Understanding Digital Media Devices
• Module 09: Windows, Linux and Macintosh Boot Processes
• Module 10: Windows Forensics
• Module 11: Linux Forensics
• Module 12: Data Acquisition and Duplication
• Module 13: Computer Forensic Tools

• Part I: Software Forensics Tools
• Part II: Hardware Forensics Tools

• Module 14: Forensics Investigations Using Encase
• Module 15: Recovering Deleted Files and Deleted partitions

• Part I: Recovering Deleted Files
• Part II: Recovering Deleted Partitions

• Module 16: Image Files Forensics
• Module 17: Steganography
• Module 18: Application Password Crackers
• Module 19: Network Forensics and Investigating Logs
• Module 20: Investigating Network Traffic
• Module 21: Investigating Wireless Attacks
• Module 22: Investigating Web Attacks
• Module 23: Router Forensics
• Module 24: Investigating DoS Attacks
• Module 25: Investigating Internet Crimes
• Module 26: Tracking E-mails and Investigating E-mail Crimes
• Module 27: Investigating Corporate Espionage
• Module 28: Investigating Trademark and Copyright Infringement
• Module 29: Investigating sexually harassment incidents
• Module 30: Investigating Child Pornography
• Module 31: PDA Forensics
• Module 32: iPod Forensics
• Module 33: Blackberry Forensics
• Module 34: Investigative Reports
• Module 35: Becoming an Expert Witness

CHFI is an EC-Council certification.