Duration:            

5 Days classroom training

Overview:          

The CHFI course will give participants the necessary skills to identify an intruder's footprints and to properly gather the necessary evidence to prosecute. Many of today's top tools of the forensic trade will be taught during this course, including software, hardware and specialised techniques.

The need for businesses to become more efficient and integrated with one another, as well as the home user, has given way to a new type of criminal, the "cyber-criminal." It is no longer a matter of "will your organisation be comprised (hacked)?" but, rather, "when?".

Today's battles between corporations, governments and countries are no longer fought only in the typical arenas of boardrooms or battlefields using physical force. Now the battlefield starts in the technical realm, which ties into most every facet of modern day life. If you or your organisation requires the knowledge or skills to identify, track and prosecute the cyber-criminal, then this is the course for you.

Special Notes:  

Prior to commencing this course, students must sign a Non-Disclosure Agreement (NDA) stating that they will not use skills learnt for illegal or malicious attacks and will not use such tools in an attempt to compromise any computer system.

Who Should Attend?    

This course is intended for Police and other law enforcement personnel, Government, Defence and Military personnel, e-Business Security professionals, Systems administrators, Legal professionals, Banking, Insurance and other professionals, Government agencies, IT managers

Prerequisites:  

It is strongly recommended that students complete the Certified Ethical Hacker (CEH) course before undertaking this course.

Key Topics:        

Module 1:   Computer Forensics in Today’s World

Module 2:   Law and Computer Forensics

Module 3:   Computer Investigation Process

Module 4:   First Responder Procedure

Module 5:   CSIRT

Module 6:   Computer Forensic Lab

Module 7:   Understanding File Systems and Hard Disks

Module 8:   Understanding Digital Media Devices

Module 9:   Windows, Linux and Macintosh Boot Processes

Module 10: Data Acquisition and Duplication

Module 11: Computer & Hardware Forensic Tools

Module 12: Forensic Investigations using Encase

Module 13: Recovering Deleted Files and Partitions

Module 14: Image Files Forensics

Module 15: Steganography

Module 16: Application Password Crackers

Module 17: Network Forensics and Investigating Logs

Module 18: Investigating Network Traffic

Module 19: Investigating Wireless, Web & DoS Attacks

Module 20: Router Forensics

Module 21: Investigating Internet Crimes

Module 22: Tracking Emails and Investigating Email Crimes

Module 23: Investigating Corporate Espionage

Module 24: Investigating Copyright and Trademark Infringements

Module 25: Investigating Sexual Harassment and Child Pornography Incidents

Module 26: PDA, Blackberry and iPod Forensics

Module 27: Investigative Reports

Module 28: Becoming an Expert Witness

Certification:    

The CHFI 312-49 exam will be conducted on the last day of training. Students need to pass the online Prometric exam to receive the CHFI certification