CHFI Exam Prep

What you will be able to do

• You will be able to describe the digital forensic investigation process and the legal and ethical obligations that govern it.
• You will be able to lawfully acquire and preserve digital evidence while maintaining an unbroken chain of custody.
• You will be able to apply write-blocking, hashing, and imaging techniques to produce forensically sound copies of media.
• You will be able to analyze Windows, Linux, network, and web artifacts to reconstruct attacker activity.
• You will be able to perform malware and volatile memory forensics to identify and characterize malicious code.
• You will be able to recover, examine, and interpret file-system, log, and registry artifacts relevant to an investigation.
• You will be able to write a defensible forensic report and prepare to give expert testimony.
• You will be able to interpret BEST, MOST, and FIRST exam phrasing and choose the strongest answer among close distractors.

What is inside

6 modules, 24 lessons. Each module ends in a graded quiz.

1. 01

   Computer Forensics Fundamentals

   Covers the EC-Council CHFI, Computer Hacking Forensic Investigator Computer Forensics Fundamentals domain (about 18% of the exam), spanning 1.1, 1.2, 1.3, 1.4, 1.5. Each objective is taught as its own lesson with worked examples and exam-style checks.

   5 lessons · 15 quiz questions

2. 02

   Evidence Acquisition & Preservation

   Covers the EC-Council CHFI, Computer Hacking Forensic Investigator Evidence Acquisition & Preservation domain (about 22% of the exam), spanning 2.1, 2.2, 2.3, 2.4, 2.5. Each objective is taught as its own lesson with worked examples and exam-style checks.

   5 lessons · 15 quiz questions

3. 03

   OS, Network & Web Forensics

   Covers the EC-Council CHFI, Computer Hacking Forensic Investigator OS, Network & Web Forensics domain (about 28% of the exam), spanning 3.1, 3.2, 3.3, 3.4, 3.5, 3.6. Each objective is taught as its own lesson with worked examples and exam-style checks.

   6 lessons · 15 quiz questions

4. 04

   Malware & Memory Forensics

   Covers the EC-Council CHFI, Computer Hacking Forensic Investigator Malware & Memory Forensics domain (about 20% of the exam), spanning 4.1, 4.2, 4.3, 4.4. Each objective is taught as its own lesson with worked examples and exam-style checks.

   4 lessons · 15 quiz questions

5. 05

   Reporting & Expert Testimony

   Covers the EC-Council CHFI, Computer Hacking Forensic Investigator Reporting & Expert Testimony domain (about 12% of the exam), spanning 5.1, 5.2, 5.3. Each objective is taught as its own lesson with worked examples and exam-style checks.

   3 lessons · 15 quiz questions

6. 06

   Exam Readiness & Practice Exam

   Pulls the whole exam together: an exam-day strategy and key-term glossary, then a timed, domain-weighted practice exam written in the real exam style.

   1 lessons · 50 quiz questions