Hacking Trainer AcademyAmeerpet · Hyderabad
+91 86868 92922 Book free classes

Certification

CHFI v11 Certification: Exam Format, Eligibility and 15 Modules

· 2 min read · By Thimmagurudu Bathini, Lead Trainer and Curriculum Designer

The Computer Hacking Forensic Investigator (CHFI v11) from EC-Council is the digital forensics certification: how to find, preserve, analyze and report evidence after an incident. These details come from EC-Council's CHFI page, read on November 5, 2026. EC-Council changes its rules and fees, so confirm current terms before you register.

Exam Format

  • Exam code: 312-49.
  • Questions: 150.
  • Duration: 4 hours, about 1 minute 36 seconds per question.
  • Passing score: EC-Council gives a range of 60% to 85%, depending on the exam form.

EC-Council describes the program as hands-on, with 68 labs that use crafted evidence files (more than 70 GB) and the tools professional investigators use.

Who Can Start

EC-Council asks for basic knowledge of IT and cybersecurity, computer forensics and incident response. If operating systems and networking are still new, start with networking basics and the SOC analyst guide first.

The 15 Modules

  • 1. Computer Forensics in Today's World
  • 2. Computer Forensics Investigation Process
  • 3. Understanding Hard Disks and File Systems
  • 4. Data Acquisition and Duplication
  • 5. Defeating Anti-Forensics Techniques
  • 6. Windows Forensics
  • 7. Linux and Mac Forensics
  • 8. Network Forensics
  • 9. Malware Forensics
  • 10. Investigating Web Attacks
  • 11. Dark Web Forensics
  • 12. Cloud Forensics
  • 13. Email and Social Media Forensics
  • 14. Mobile Forensics
  • 15. IoT Forensics

What the Work Is Like

Forensics is slow and careful. You copy evidence without changing it, document who handled it, build a timeline and write findings that someone else can check. Our forensics basics guide walks through the first steps.

Cost and What We Offer

Our CHFI fee is ₹37,000 + 18% GST (₹43,660 in total). Each EC-Council certification fee includes one exam attempt. The full table is on the CHFI certification page. Forensics and incident handling are also part of our SOC, Splunk, Wazuh and DFIR course, which is not EC-Council courseware.

Not sure whether forensics or SOC work suits you? Ask a counselor. Contact us or call +91 86868 92922.

Courses Mentioned in This Guide

Intermediate to advanced · EC-Council certification

Computer Hacking Forensic Investigator (CHFI v11)

Investigate incidents and handle digital evidence properly.

₹37,000 + GST

  • Evidence acquisition
  • Disk and OS forensics
  • Network and cloud forensics
  • Reporting
View the certification →
Beginner to intermediate · Course · 6 weeks, 90 hours

SOC Analyst and DFIR

The core concepts of EC-Council's CCT, CSA, ECIH and CHFI, taught hands-on with Splunk, Wazuh and forensics tools, in six weeks.

₹20,000 + GST · 6 weeks

  • CCT, CSA, ECIH, CHFI core concepts
  • Splunk and Sentinel
  • Phishing triage and hunting
  • Incident handling
  • Forensics and malware analysis
View the course →
Advanced · EC-Council certification

Certified SOC Analyst (CSA v2)

Run the SOC. Hunt threats and manage security incidents.

₹34,000 + GST

  • SOC operations
  • Threat hunting
  • SIEM management
  • Orchestration
View the certification →

More Guides

SOC and blue team · 2 min read

Digital Forensics for Beginners: Chain of Custody and First Steps

A beginner guide to digital forensics: the investigation process, chain of custody, why you never work on the original, free tools to practice and the career.

Read the guide →
SOC and blue team · 2 min read

Autopsy and the Sleuth Kit for Beginners: Disk Forensics

Build a practice disk image, list and recover deleted files with The Sleuth Kit and review it in Autopsy, with commands for a Linux forensics lab.

Read the guide →
SOC and blue team · 2 min read

Volatility for Beginners: Memory Forensics Cheat Sheet

Volatility 3 cheat sheet for memory forensics: list processes, command lines and network connections, and find injected code in a Windows image.

Read the guide →
Certification · 3 min read

CND Certification: Exam Format, Eligibility and 20 Modules

What the EC-Council CND exam looks like: 100 questions in 4 hours, the 20 modules, who can start, how much is hands-on and what it leads to.

Read the guide →

Start Your Cyber Security Career

Talk to a counselor, choose the right course for your goals, and get the fee, syllabus and next batch dates in writing.

Book Free Trial Classes

By submitting, you agree that Hacking Trainer Academy may contact you about courses by phone, WhatsApp or email. See our privacy notice and refund policy.

WhatsApp