What is CHFI?
Computer Hacking Forensic Investigation is the process of detecting hacking attacks and properly extracting evidence to report the crime and conduct audits to prevent future attacks.
Computer crime is on the rise worldwide, and investigation techniques are now used by police, government, and corporate entities across the globe. Many professionals turn to EC-Council’s CHFI Certification Program for training in this critical field.
The program prepares you to conduct computer investigations using advanced digital forensics technologies and tools.
What Does a CHFI Do?
A Computer Hacking Forensic Investigator applies computer investigation and analysis techniques to determine potential legal evidence.
Investigators may handle cases involving:
- Theft of trade secrets
- Destruction or theft of intellectual property
- Fraud
- Computer break-ins
- Industrial espionage
- E-mail fraud
- Web page defacements
- Possession of pornography
- Breach of contract
- Bankruptcy cases
- Disputed dismissals
- Theft of company documents
- Disloyal employees
CHFI professionals are trained to recover deleted, encrypted, or damaged files and to uncover critical evidence.
Why CHFI Certification?
The CHFI certification validates your ability to:
- Identify an intruder’s footprints
- Properly gather necessary evidence
- Support prosecution in a court of law
Who Can Benefit?
The CHFI program is designed for:
- Police and law enforcement personnel
- Defense and military staff
- e-Business security professionals
- IT managers and system administrators
- Legal professionals
- Government agencies
- Banking, insurance, and corporate professionals
CHFI Exam Details
- Exam Code: EC0 312-49
- Duration: 4 hours
- Questions: 150
- Format: Multiple forms (different question banks)
- Passing Score: Varies by exam form (60% – 85%)
Passing Criteria:
In order to maintain the high integrity of our certification exams, EC-Council Exams are provided in multiple forms (i.e., different question banks). Each form is carefully analyzed through beta testing with an appropriate sample group under the purview of a committee of subject matter experts that ensure that each of our exams not only have academic rigor but also have “real world” applicability. We also have a process to determine the difficulty rating of each question. The individual rating then contributes to an overall “Cut Score” for each exam form. To ensure each form has equal assessment standards, cut scores are set on a “per exam form” basis. Depending on which exam form is challenged, cut scores can range from 60% to 85%.




















