CHFI Certification Training in Hyderabad| Cybereagle

CHFI Training

lead by developer

CHFI ONLINE TRAINING INISTITUTE IN HYDERABAD

Computer Hacking Forensic Investigation (CHFI) technology is highly deployed in cybercrime/Forensic Investigation field. We train in such a way that the candidate will understand each and every concept of identifying and detecting intruder attacks, how to reporting the crime, and monitoring the future attacks and resolving solutions. Cyber Eagle Educational Services Pvt. Ltd. has efficiently designed the CHFI training format specifically to tap the CNSS 4011-4016 Federal Security Certification Training standards.

Major Objectives of CHFI Training Course:

Cyber Eagle Educational Services Pvt. Ltd. primarily focuses on:

Basics of Computer Forensics and uses
Explanation of Computer Crimes and related case studies
Providing knowledge of Cyber Crime Investigation rules and Risks present for investigators
Various phases involved in the Computer Forensics Investigation Process
Knowledge of Hard disks and file systems concepts and analysis procedures
Explanation about RAID Storage System
Provides valuable sessions on data acquisition and duplication concepts
Providing knowledge of Anti-Forensics techniques
Explanation of various operating systems (includes Windows, Linux, and Mac) forensics
Network forensics concepts
One of the core objectives of our CHFI training is providing knowledge of web application threats and investigation procedures
Database Forensics and Its Significance
Provides basics of cloud computing and cloud forensics tools
Our experienced trainers will focus on explaining the malware Forensics rules and significance of threat detection
E-mail crimes will also be targeted and explained
Provides knowledge of Mobile Phone Forensics
Finally, we let you know the forensics report writing and presentation procedures

CHFI Examination Pattern:

Exam Code: It varies at different testing centers.
VUE: 312-49
Prometric APTC: EC0-349
Prometric Prime: 312-49
Number of questions: 150
The test Duration of Certified hacker exam: 4 Hours
Passing score: 70%
The test offered in Languages: English.
Types of questions in CHFI V8: multiple Choice types
Test Delivery: Prometric APTC /VUE/ Prometric Prime

Our CHFI Training is Designed in an Innovative Format:

Lab and LMS accessibility to the registered candidates
Live interactive sessions by the qualified and experienced trainers
Proper assistance to work on real-time projects
CHFI training certification at the end of the training

Our CHFI Training Certification Gives You A Strong Professional Career:

Cyber Eagle Educational Services Pvt. Ltd. provides EC council CHFI Certification at the end of the course. Our CHFI Training Certification depicts the candidate name, course duration and grade obtained based on the performance during the project sessions. Our trainers give assistance in accomplishing practical works of real case studies at own pace. The certification will be labeled with course name, course duration along with the grade.

Intensified Career Opportunities are Waiting for CHFI Professionals:

Market comprise multiple vacancies for CHFI certified professionals. Demand for CHFI professionals is increasing in the recent past. Multiple companies/MNCs, predominantly in Public Sectors, demand for a certified CHFI Professional is increasing at a rapid pace for protecting their information coming from numerous sources. The CHFI professional will be hired as an Information Security Manager, Senior Security Consultant, Security Analyst, Information Security Analyst & Security Manager, and IT Professional. Thus, learning CHFI course ensures career excel to the candidates.

Pre-requisites to Learn CHFI Course:

Knowledge of Windows/Unix/Linux systems
Knowledge of Security background techniques and concepts
Knowledge of TCP, IP and other networking protocols
Basics of CHFI to understand CHFI easily

Who can Learn Our CHFI Training?

Defense & Military Individuals
Technical Support
System Admin Individuals
Security Professionals
IT Application Managers
Insurance, Banking, and other legal professionals

We Have a Strong Global Presence:

Our learners come from across the world. In addition, we also provide Offline CHFI training in offline training and corporate training format. In particular, we have a strong presence in India. Cyber Eagle Educational Services Pvt. Ltd. is the biggest CHFI Training Institute in Hyderabad.

Module 01: Computer Forensics in Today’s World

Understanding Computer Forensics
Why and When Do You Use Computer Forensics?
Cyber Crime (Types of Computer Crimes)
Case Study
Challenges Cyber Crimes Present for Investigators
Cyber Crime Investigation
- Civil versus Criminal Investigation
- Case Study: Criminal Case
- Case Study: Civil Case
- Administrative Investigation
- Case Study: Administrative Case
Rules of Forensics Investigation
- Enterprise Theory of Investigation (ETI)
Understanding Digital Evidence
Types of Digital Evidence
Characteristics of Digital Evidence
Role of Digital Evidence
- Digital Forensics Challenges
Sources of Potential Evidence
Rules of Evidence
- Best Evidence Rule
- “Hearsay” concept
- Federal Rules of Evidence
  - Scientific Working Group on Digital Evidence (SWGDE)
Forensics Readiness
- Forensics Readiness Planning
Computer Forensics as part of an Incident Response Plan
Need for Forensic Investigator
Roles and Responsibilities of Forensics Investigator
What makes a Good Computer Forensics Investigator?
Investigative Challenges
- Computer Forensics: Legal Issues
- Computer Forensics: Privacy Issues
Legal and Privacy Issues
Code of Ethics
Accessing Computer Forensics Resources

Module 02: Computer Forensics Investigation Process

Module 03: Understanding Hard Disks and File Systems

Module 04: Data Acquisition and Duplication

Data Acquisition and Duplication Concepts
- Understanding Data Acquisition
  - Types of Data Acquisition Systems
- Live Data Acquisition
- Order of Volatility
- Common Mistakes in Volatile Data Collection
- Volatile Data Collection Methodology
Static Acquisition
- Static Data Acquisition
- Rules of Thumb
- Why to Create a Duplicate Image?
- Bit Stream Image Vs. Backups
- Issues with Data Duplication
- Data Acquisition and Duplication Steps
- Prepare a Chain of Custody Document
- Enable Write Protection on the Evidence Media
- Sanitize the Target Media: NIST SP 800-88 Guidelines
- Determine the Data Acquisition Format
- Data Acquisition Methods
- Determine the Best Acquisition Method
- Select the Data Acquisition Tool
  - Mandatory Requirements
  - Optional Requirements
- Data Acquisition and Duplication Tools: Hardware
- Data Acquisition and Duplication Tools: Software
- Linux Standard Tools
- Acquiring Data on Linux: dd Command
- Acquiring Data on Linux: DCFLDD Command
- Acquiring Data on Windows: Access Data FTK Imager
- Acquiring RAID Disks
- Remote Data Acquisition
- Data Acquisition Mistakes
- Plan for Contingency
Validate Data Acquisitions
- Linux Validation Methods
- Windows Validation Methods
Acquisition Best Practices

Module 05: Defeating Anti-forensics Techniques

Definition of Anti-Forensics
- Goals of Anti-Forensics
Anti-Forensics techniques
- Data/File Deletion
  - What Happens When a File is Deleted in Windows?
  - Recycle Bin in Windows
    - Storage Locations of Recycle Bin in FAT and NTFS Systems
    - How the Recycle Bin Works
    - Damaged or Deleted INFO2 File
    - Damaged Files in Recycle Bin Folder
    - Damaged Recycle Bin Folder
    - File Recovery Tools: Windows
  - File Recovery in MAC OS X
    - File Recovery Tools: MAC
    - File Recovery in Linux
  - Recovering the Deleted Partitions
    - Partition Recovery Tools: [email protected] Partition Recovery
    - Partition Recovery Tools (For Windows, MAC, & Linux all together)
- Password Protection
  - Password Types
  - Password Cracker and its Working
  - Password Cracking Techniques
  - Default Passwords
  - Using Rainbow Tables to Crack Hashed Passwords
    - Tools to Create Rainbow Tables: rtgen and Winrtgen
  - Microsoft Authentication
    - How Hash Passwords Are Stored in Windows SAM?
  - System Software Password Cracking
  - Bypassing BIOS Passwords
    - Using Manufacturer’s Backdoor Password to Access the BIOS
    - Using Password Cracking Software
      - CmosPwd
      - DaveGrohl
    - Resetting the CMOS using the Jumpers or Solder Beads
    - Removing CMOS Battery
    - Overloading the Keyboard Buffer and Using a Professional Service
    - Tool to Reset Admin Password
      - [email protected] Password Changer
      - Windows Password Recovery Bootdisk
      - Windows Password Recovery Lastic
    - Application Password Cracking Tools
      - Word Password Recovery Tools
      - PowerPoint Password Recovery Tools
      - Excel Password Recovery Tools
      - PDF Password Recovery Tools
      - ZIP/RAR Password Recovery Tool: Advanced Archive Password Recovery
      - Other Application Software Password Cracking Tools
      - Other Password Cracking Tools
- Steganography
  - Steganography
    - Steganography
    - Types of Steganography based on Cover Medium
  - Steganalysis
    - Steganalysis
    - Steganalysis Methods/Attacks on Steganography
    - Detecting Steganography
    - Steganography Detection Tool: Gargoyle Investigator™ Forensic Pro
    - Steganography Detection Tools
  - Data Hiding in File System Structures
  - Trail Obfuscation
  - Artifact Wiping
  - Overwriting Data/Metadata
- Encryption
  - Encrypting File System (EFS): Recovery Certificate
  - Advanced EFS Data Recovery Tool
- Encrypted Network Protocols
- Program Packers
- Rootkits
  - Detecting Rootkits
  - Steps for Detecting Rootkits
- Minimize Footprint
- Exploiting Forensic Tools Bugs
- Detecting Forensic Tool Activities
- Anti-Forensics Countermeasures
- Anti-Forensics Challenges
- Anti-forensics Tools
  - Privacy Eraser
  - Azazel Rootkit
  - QuickCrypto
- Anti-forensics Tools

Module 06: Operating System Forensics (Windows, Mac, Linux)
Introduction to OS Forensics
Windows Forensics

Linux Forensics

Shell Commands
Linux Log files
Collecting Volatile Data
Collecting Non-Volatile Data

MAC Forensics

Introduction to MAC Forensics
MAC Forensics Data
MAC Log Files
MAC Directories
MAC Forensics Tools

Module 07: Network Forensics

Module 08: Investigating Web Attacks

Introduction to Web Application Forensics
- Introduction to Web Application Forensics
- Web Application Architecture
- Challenges in Web Application Forensics
Web Attack Investigation
- Indications of a Web Attack
- Web Application Threats - 1
- Web Application Threats - 2
- Investigating a Web Attack
- Investigating Web Attacks in Windows-Based Servers
Investigating Web Server Logs
- Internet Information Services (IIS) Logs
  - IIS Web Server Architecture
  - IIS Logs
  - Investigating IIS Logs
  - Maintaining Credible IIS Log Files
  - Investigating IIS Logs: Best Practices
  - UTC Time
- Investigating Apache Logs
  - Apache Web Server Architecture
  - Apache Web Server Logs
  - Investigating Apache Logs
- Investigating Cross-Site Scripting (XSS)
- Investigating XSS: Using Regex to Search XSS Strings
- Investigating SQL Injection Attacks
- Pen-Testing CSRF Validation Fields
- Investigating Code Injection Attack
- Investigating Cookie Poisoning Attack
Web Attack Detection Tools
- Web Log Viewers
Tools for Locating IP Address
- IP Address Locating Tools
WHOIS Lookup Tools
WHOIS Lookup Tools

Module 09: Database Forensics

Database Forensics and Its Importance
MSSQL Forensics
- Data Storage in SQL Server
- Database Evidence Repositories
- Collecting Volatile Database Data
  - Collecting Primary Data File and Active Transaction Logs Using SQLCMD
  - Collecting Primary Data File & Transaction Logs
  - Collecting Active Transaction Logs Using SQL Server Management Studio
  - Collecting Database Plan Cache
  - Collecting Windows Logs
  - Collecting SQL Server Trace Files
  - Collecting SQL Server Error Logs
  - Database Forensics Using SQL Server Management Studio
  - Database Forensics Using ApexSQL DBA
MySQL Forensics
- Internal Architecture of MySQL
  - Structure of the Data Directory
- MySQL Forensics
  - Viewing the Information Schema
  - MySQL Utility Programs for Forensic Analysis
  - Common Scenario for Reference
  - MySQL Forensics for WordPress Website Database: Scenario 1
    - Collect the Evidences
    - Examine the Log Files
    - Analyze the General Log
    - Take a Backup of the Database
    - Create an Evidence Database
    - Select the Database
    - View the Tables in the Database
    - View the Users in the Database
    - View Columns in the Table
    - Collect the Posts Made by the User
    - Examine the Posts Made by the User
  - MySQL Forensics for WordPress Website Database: Scenario 2
    - Collect the Database and all the Logs
    - Examine the .frm Files
    - Examine the Binary Logs
    - Retrieve the Deleted User Account
    - ibdata1 in Data Directory

Module 10: Cloud Forensics

Introduction to Cloud Computing
- Types of Cloud Computing Services
- Separation of Responsibilities in Cloud
- Cloud Deployment Models
- Cloud Computing Threats
- Cloud Computing Attacks
Cloud Forensics
- Usage of Cloud Foreniscs
- Cloud Crimes
  - Case Study: Cloud as a Subject
  - Case Study: Cloud as the Object
  - Case Study: Cloud as a Tool
- Cloud Forensics: Stakeholders and their Roles
- Cloud Forensics Challenges
  - Architecture and Identification
  - Data Collection
  - Legal
  - Analysis
  - Cloud Forensics Challenges
- Investigating Cloud Storage Services
- Investigating Dropbox Cloud Storage Service
  - Artifacts Left by Dropbox Web Portal
  - Artifacts Left by Dropbox Client on Windows
- Investigating Google Drive Cloud Storage Service
  - Artifacts Left by Google Drive Web Portal
  - Artifacts Left by Google Drive Client on Windows
- Cloud Forensics Tools: UFED Cloud Analyzer

Module 11: Malware Forensics

Introduction to Malware
- Different Ways a Malware can Get into a System
- Common Techniques Attackers Use to Distribute Malware on the Web
- Components of Malware
Introduction to Malware Forensics
- Why Analyze Malware
- Identifying and Extracting Malware
- Prominence of Setting up a Controlled Malware Analysis Lab
- Preparing Testbed for Malware Analysis
- Supporting Tools for Malware Analysis
- General Rules for Malware Analysis
- Documentation Before Analysis
- Types of Malware Analysis
  - Malware Analysis: Static
    - Static Malware Analysis: File Fingerprinting
    - Online Malware Testing: VirusTotal
    - Online Malware Analysis Services
    - Local and Malware Scanning
    - Performing Strings Search
    - Identifying Packing/Obfuscation Methods
    - Finding the Portable Executables (PE) Information
    - Identifying File Dependencies
    - Malware Disassembly
    - Malware Analysis Tool: IDA Pro
  - Malware Analysis: Dynamic
    - Installation Monitor
    - Process Monitor
      - Process Monitoring Tool: What's Running
      - Process Monitoring Tools
    - Files and Folder Monitor
      - Files and Folder Integrity Checkers: FastSum and WinMD5
      - Files and Folder Integrity Checkers
    - Registry Monitor
      - Registry Entry Monitoring Tool: RegScanner
      - Registry Entry Monitoring Tools
    - Network Activity Monitor
      - Detecting Trojans and Worms with Capsa Network Analyzer
    - Port Monitor
      - Port Monitoring Tools: TCPView and CurrPorts
    - DNS Monitoring/Resolution
    - API Calls Monitor
    - Device Drivers Monitor
      - Device Drivers Monitoring Tool: DriverView
      - Device Drivers Monitoring Tools
    - Startup Programs Monitor
      - Windows 10 Startup Registry Entries
      - Startup Programs Monitoring Tool: Security AutoRun
      - Startup Programs Monitoring Tools
    - Windows Services Monitor
      - Windows Service Manager (SrvMan)
      - Windows Services Monitoring Tools
  - Analysis of Malicious Documents
  - Malware Analysis Challenges

Module 12: Investigating Email Crimes

Email System
- Email Clients
- Email Server
- SMTP Server
- POP3 Server
- IMAP Server
- Importance of Electronic Records Management
Email Crimes (Email Spamming, Mail Bombing/Mail Storm, Phishing, Email Spoofing, Crime via Chat Room, Identity Fraud/Chain Letter)
- Crime Via Chat Room
Email Message
- Sample of Email Header
- List of Common Headers
- List of Common X-Headers
Steps to Investigate Email Crimes and Violation
- Obtain a Search Warrant and Seize the Computer and Email Account
- Examine E-mail Messages
  - Copy and Print the E-mail Message
  - Viewing Email Headers in Microsoft Outlook
  - Viewing Email Headers in Microsoft Outlook.com
  - Viewing Email Headers in AOL
  - Viewing Email Headers in Apple Mail
  - Viewing Email Headers in Gmail
  - Viewing Headers in Yahoo Mail
  - Received Headers
  - Analyzing Email Headers
  - Examining Additional Files (.pst or .ost files)
  - Checking the E-mail Validity
  - Examine the Originating IP Address
  - Trace the E-mail Origin
  - Validating Header Information
  - Tracing Back Web-based E-mail
- Acquire Email Archives
  - Email Archives
  - Content of Email Archives
  - Local Archive
  - Server Storage Archive
  - Forensic Acquisition of Email Archive
- Recover Deleted Emails
  - Deleted Email Recovery
- Examining Email Logs
  - Examining Linux E-mail Server Logs
  - Examining Microsoft Exchange E-mail Server Logs
  - Examining Novel Group-wise E-mail Server Logs
Email Forensics Tools
- Recover My Email
- MailXaminer
- Email Forensics Tools
Laws and Acts against Email Crimes
- S. Laws Against Email Crime: CAN-SPAM Act

Module 13: Mobile Phone Forensics

Mobile Device Forensics
- Why Mobile Forensics?
- Top Threats Targeting Mobile Devices
- Mobile Hardware and Forensics
- Mobile OS and Forensics
  - Architectural Layers of Mobile Device Environment
  - Android Architecture Stack
  - Android Boot Process
  - iOS Architecture
  - iOS Boot Process
  - Normal and DFU Mode Booting
  - Booting iPhone in DFU Mode
  - Mobile Storage and Evidence Locations
- What Should You Do Before the Investigation?
  - Build a Forensics Workstation
  - Build the Investigation Team
  - Review Policies and Laws
  - Notify Decision Makers and Acquire Authorization
  - Risk Assessment
  - Build a Mobile forensics Toolkit
  - Mobile Phone Evidence Analysis
- Mobile Forensics Process
  - Collecting the Evidence
  - Document the Scene
  - Document the Evidence
  - Evidence Preservation
  - Set of Rules for Switching ON/OFF Mobile Phone
  - Mobile Phone Signal Containment
  - Packing, Transporting, and Storing the Evidence
  - Forensics Imaging
    - Forensics Imaging of Android Device Using FTK Imager
    - Creating Disk Image of an iPhone Using SSH
  - Phone Locking
    - Bypassing Android Phone Lock Password Using ADB
    - iPhone Passcodes
    - Bypassing the iPhone Passcode Using IExplorer
  - Enabling USB Debugging
  - Platform Security Removal Techniques: Jailbreaking/Rooting
  - Mobile Evidence Acquisition
    - Data Acquisition Methods
  - Cellular Network
    - Components of Cellular Network
    - Different Cellular Networks
    - Cell Site Analysis: Analyzing Service Provider Data
    - CDR Contents
    - Sample CDR Log File
  - Subscriber Identity Module (SIM)
    - SIM File System
    - Data Stored in a Subscriber Identity Module
    - Integrated Circuit Card Identification (ICCID)
    - International Mobile Equipment Identifier (IMEI)
    - Electronic Serial Number (ESN)
    - SIM Cloning
    - SIM Data Acquisition Tools
    - SIM Forensic Analysis Tools
  - Logical Acquisition
    - Android Logical Acquisition Using MOBILedit
    - Additional Logical Acquisition Tools
  - Physical Acquisition
    - Physical Acquisition Using Oxygen Forensic Suite
  - File System Acquisition
    - File System Acquisition Using Oxygen Forensic Suite
  - File Carving
    - File Carving Using Forensic Explorer
    - iPhone File Carving Using Scalpel Tool
    - File Carving Tools
  - SQLite Database Extraction
    - Forensics Analysis of SQLite Database Using Andriller
    - SQLite Database Browsing Tools: Oxygen Forensics SQLite Viewer
    - SQLite Database Browsing Tools
  - Android Forensics Analysis
  - iPhone Data Extraction
    - iPhone Data Acquisition Tools
    - iPhone Forensics Analysis Using the Oxygen Forensics Suite
  - Examination and Analysis
  - Generating Investigation Report
  - Mobile Forensics Report Template
    - Sample Mobile Forensics Analysis Worksheet
    - Cellebrite UFED Touch Sample Mobile Forensic Report Snapshot

Module 14: Forensics Report Writing and Presentation

Writing Investigation Reports
- Forensic Investigation Report
- Important Aspects of a Good Report
- Forensic Investigation Report Template
- Report Classification
- Guidelines for Writing a Report
- Other Guidelines for Writing a Report
Expert Witness Testimony
- What is an Expert Witness?
- Roles of an Expert Witness
- Technical Witness Vs. Expert Witness
- Daubert Standard
- Frye Standard
- What Makes a Good Expert Witness?
- Importance of Curriculum Vitae
- Professional Code of Conduct for an Expert Witness
- Preparing for a Testimony
  - Testifying in the Court
  - General Order of Trial Proceedings
  - General Ethics While Testifying
  - Importance of Graphics in a Testimony
  - Helping your Attorney
  - Avoiding Testimony Issues
  - Testifying during Direct Examination
  - Testifying during Cross- Examination
  - Testifying during Cross- Examination: Best Practices
- Deposition
  - Guidelines to Testify at a Deposition
- Dealing with Media

Coming Soon...

Training Center

Address: 21-164, Near Muslim Darga, Balaji nagar, Kukatpally Hyderabad - 500072
Phone: +91 9121459111
Phone: +91 9121462111
Email: info@cybereagle.in

CHFI ONLINE TRAINING

CHFI Training

CHFI ONLINE TRAINING INISTITUTE IN HYDERABAD

We Have a Strong Global Presence:

Coming Soon...

Training Center

Location

CONTACT US