Computer Hacking Forensic Investigator (CHFI v11)

Section 01

01. At a Glance

About the course

CHFI v11 covers digital forensics from disk and memory through mobile, cloud and malware. Macksofy delivers it with industry-standard tools (Autopsy, FTK, Volatility) on real case data — including India-context investigations we've worked on.

Section 02

02. Who Is This Course For

• Law enforcement and government investigators
• Corporate IR and DFIR teams
• E-discovery analysts and legal-tech professionals

Prerequisites

• IT / security background recommended
• Familiarity with Windows + Linux internals

Section 03

03. What You Will Be Able To Do

• Conduct forensically sound investigations on disk, memory and network
• Perform mobile device and cloud forensics
• Produce expert-witness-grade reports
• Pass the CHFI v11 (312-49) exam

Section 04

04. Curriculum — 17 Modules

Module structure and topic coverage authored by Macksofy Technologies based on the publicly-published vendor syllabus, current as of the issue date of this brochure. Vendor reserves the right to revise content; Macksofy keeps cohort material aligned to the latest release.

1. Module 01

   Module 01 · Computer Forensics in Today's World

   4 topics
   • Forensics readiness
   • Cybercrime types & investigation roles
   • Indian IT Act 2000 + Section 65B Evidence Act
   • Forensics lifecycle
2. Module 02

   Module 02 · Computer Forensics Investigation Process

   3 topics
   • Pre-investigation, investigation, post-investigation phases
   • Chain of custody documentation
   • Evidence collection & preservation
3. Module 03

   Module 03 · Hard Disks and File Systems

   4 topics
   • HDD vs SSD architecture
   • NTFS, FAT, ext, APFS, HFS+
   • Boot sectors, partition tables
   • Disk imaging fundamentals
4. Module 04

   Module 04 · Data Acquisition and Duplication

   4 topics
   • Live vs static acquisition
   • FTK Imager, Guymager, dd / dcfldd
   • Hash verification (MD5, SHA-256)
   • Hardware write-blockers
5. Module 05

   Module 05 · Defeating Anti-forensics Techniques

   3 topics
   • Detecting data hiding (steganography, ADS)
   • Recovering deleted / wiped files
   • Encrypted volume analysis
6. Module 06

   Module 06 · Windows Forensics

   4 topics
   • Windows Registry artifacts
   • Event logs, prefetch, ShimCache, AmCache
   • USB / external device forensics
   • Browser & email artifact analysis
7. Module 07

   Module 07 · Linux and Mac Forensics

   3 topics
   • Linux filesystem artifacts
   • Bash history, syslog, journald
   • macOS APFS, plist, FSEvents
8. Module 08

   Module 08 · Network Forensics

   4 topics
   • PCAP analysis (Wireshark, NetworkMiner)
   • Flow data analysis
   • Detecting C2 traffic
   • Packet carving
9. Module 09

   Module 09 · Investigating Web Attacks

   3 topics
   • Web-server log forensics
   • SQLi / XSS / file-upload incident analysis
   • Apache, IIS, Nginx artifact review
10. Module 10

    Module 10 · Dark Web Forensics

    3 topics
    • Tor architecture and tracing
    • Hidden services & marketplaces
    • Cryptocurrency tracing basics
11. Module 11

    Module 11 · Database Forensics

    3 topics
    • MSSQL, MySQL, Oracle artifact analysis
    • Transaction log examination
    • Detection of unauthorized access
12. Module 12

    Module 12 · Cloud Forensics

    3 topics
    • AWS / Azure / GCP forensic acquisition
    • CloudTrail, Activity Log, Audit Log analysis
    • S3 / Blob / GCS evidence collection
13. Module 13

    Module 13 · Investigating Email Crimes

    3 topics
    • Email header analysis
    • Phishing / spoofing / BEC investigation
    • Server-side log review
14. Module 14

    Module 14 · Malware Forensics

    3 topics
    • Static analysis with REMnux & PE-bear
    • Dynamic analysis with Cuckoo / ANY.RUN
    • IOC + YARA rule extraction
15. Module 15

    Module 15 · Mobile Forensics

    3 topics
    • iOS & Android acquisition (logical, physical, cloud)
    • Cellebrite UFED, MOBILedit basics
    • App data + chat application forensics
16. Module 16

    Module 16 · IoT Forensics

    3 topics
    • IoT device acquisition methodology
    • Firmware extraction & analysis
    • Smart-home, ICS, automotive forensics
17. Module 17

    Capstone · Court Testimony & Reporting (Macksofy)

    3 topics
    • Expert-witness report writing
    • Section 65B certificates
    • Mock cross-examination practice

Section 05

05. Tools You Will Operate

Section 06

06. Career Outcomes

Section 07

07. Placement Support

Macksofy's placement desk works directly with 80+ hiring partners across India and the UAE. Resume coaching, mock interviews and direct intros included.

• 1:1 resume + LinkedIn rewrite with our hiring desk
• Mock interviews with active practitioners
• Direct intros to BFSI, fintech and Big-4 partners
• UAE placement support (Dubai, Abu Dhabi)

Section 08

08. Why Macksofy

• Vendor-true delivery — Macksofy is an EC-Council Accredited Training Center (ATC) delivering practitioner-led bootcamps with exam-prep support.
• Practitioner-led delivery — every Macksofy instructor is a working OSCP / OSWE / OSEP / CISA-certified consultant on real client engagements during the week.
• Mentor support until you pass — extended access to mentor office hours and exam-day prep at no additional cost.
• Placement desk — Macksofy works with 80+ hiring partners across India and the UAE; your post-course resume, portfolio review and mock interviews are included.
• Indian classroom + online cohorts — onsite delivery in Mumbai BKC and Hyderabad HITEC City; live virtual cohorts pan-India with recordings.

Section 09

09. How to Enrol

1. Submit the enquiry form at macksofy.com/contact or call +91 99308 24239.
2. A Macksofy advisor will respond within 4 business hours with the next batch dates, payment terms and invoice.
3. Confirm enrolment via NEFT / RTGS / corporate card. EMI options available for select courses.
4. Receive welcome kit, lab credentials and the cohort calendar within 24 hours of confirmation.