What is CHFI?
Computer Hacking Forensic Investigation is the process of detecting hacking attacks and properly extracting evidence to report the crime and conduct audits to prevent future attacks.
Computer crime is on the rise worldwide, and investigation techniques are now used by police, government, and corporate entities across the globe. Many professionals turn to EC-Council’s CHFI Certification Program for training in this critical field.
The program prepares you to conduct computer investigations using advanced digital forensics technologies and tools.
What Does a CHFI Do?
A Computer Hacking Forensic Investigator applies computer investigation and analysis techniques to determine potential legal evidence.
Investigators may handle cases involving:
- Theft of trade secrets
- Destruction or theft of intellectual property
- Fraud
- Computer break-ins
- Industrial espionage
- E-mail fraud
- Web page defacements
- Possession of pornography
- Breach of contract
- Bankruptcy cases
- Disputed dismissals
- Theft of company documents
- Disloyal employees
CHFI professionals are trained to recover deleted, encrypted, or damaged files and to uncover critical evidence.
Why CHFI Certification?
The CHFI certification validates your ability to:
- Identify an intruder’s footprints
- Properly gather necessary evidence
- Support prosecution in a court of law
Who Can Benefit?
The CHFI program is designed for:
- Police and law enforcement personnel
- Defense and military staff
- e-Business security professionals
- IT managers and system administrators
- Legal professionals
- Government agencies
- Banking, insurance, and corporate professionals
CHFI Exam Details
- Exam Code: EC0 312-49
- Duration: 4 hours
- Questions: 150
- Format: Multiple forms (different question banks)
- Passing Score: Varies by exam form (60% – 85%)





















