HanuxLearning
Loading…
Have a voucher code? Redeem it and reserve your seat
Grab your voucher →HanuxLearning
Loading…
CHFI v11 (Computer Hacking Forensic Investigator) training and exam prep - EC-Council's DoD 8140-approved, ANSI-accredited digital forensics certification, with 68+ hands-on labs.
Group Enrollment with Friends or Colleagues | Get a quote
The Computer Hacking Forensic Investigator (CHFI v11) is EC-Council's digital forensics and investigation certification. It teaches you to investigate cyber-attacks the way a forensic examiner does: identify, collect and preserve digital evidence; analyse file systems, disks and memory; investigate network and web attacks, malware, mobile devices and the cloud; and follow a defensible methodology so findings hold up. Version 11 adds modern topics including dark web, IoT, OT, fileless malware and AI-assisted forensics. The certification is earned by passing one exam (exam code 312-49): 150 scenario-based multiple-choice questions in 4 hours, delivered online via the EC-Council exam portal or Pearson VUE. The passing score varies by exam form (commonly cited in the 60-85% range;some sources cite around 70%). The course is intensively hands-on, with 68+ labs using real evidence files and industry forensic tools.
CHFI is the best-known digital forensics certification, and its DoD 8140/8570 approval means US government, defense-contractor and law- enforcement roles frequently list it. It proves you can investigate a breach end-to-end - preserve evidence, analyse disks, memory, networks, malware, mobile and cloud, and produce defensible findings. For SOC analysts and incident responders, it is a strong way to move into the high-value forensics and investigation specialism, and it pairs naturally with CEH (attack) and CND (defend).
Source: Glassdoor
Source: Indeed
Annual Salary
Source: Glassdoor
Hiring Companies
Source: Indeed
Batch starting from:
CHFI is a specialist certification. It is ideal for: - Digital forensic analysts and examiners - Incident responders and SOC analysts - Law-enforcement and computer-crime investigators - Cybersecurity consultants and IT security professionals Recommended background: networking and security fundamentals, and ideally CEH-level knowledge. Digital-evidence experience helps.
How to earn it:
1. Prepare with a CHFI exam-prep course that includes hands-on forensic labs - that is what we provide.
2. Become eligible: like CEH, there is a training route and an experience/eligibility route - confirm the current rules on eccouncil.org.
3. Register and tak...
The Computer Hacking Forensic Investigator (CHFI v11) certification validates your knowledge of digital forensics, cybercrime investigation, and the methods used to identify, collect, preserve, and analyze digital evidence. The exam assesses your understanding of forensic investigation processes, evidence handling, disk and file system analysis, network forensics, malware investigation, cloud forensics, and digital investigation techniques. Understanding the exam structure and certification requirements can help you plan your preparation effectively and build confidence before the assessment. This section explains the exam pattern, question format, duration, certification requirements, and other important details you should know before taking the Computer Hacking Forensic Investigator (CHFI v11) exam.
Exam details verified on 16 August 2026. The CHFI v11 exam (code 312-49) is 150 scenario-based multiple-choice questions in 4 hours; the passing score varies by exam form (commonly cited 60-85%; some sources cite around 70%). The course includes 68+ hands-on labs with real evidence files. CHFI is DoD 8140/8570 approved and ANSI-accredited. It is valid 3 years and maintained with 120 ECE credits plus an annual membership fee. Pricing varies by route and region.
CHFI is ideal for: - Digital forensic analysts and examiners - Incident responders and SOC analysts - Law-enforcement and computer-crime investigators - Cybersecurity consultants and IT security professionals CHFI is a specialist certification; recommended background includes networking and security fundamentals and ideally CEH-level knowledge. If you are new to cybersecurity, our Certified Cybersecurity Technician (CCT) course is a good starting point. If you want to focus on incident handling, see our EC-Council Certified Incident Handler (ECIH) course.
