Page 

Computer Hacking Forensic Investigator http://www.eccouncil.org http://www.eccouncil.org

EC-Council EC-Council

TM

Computer
Page 

C HFI
Hacking Forensic

INVESTIGATOR

Course Description The CHFI course will give participants the necessary skills to identify an intruder’s footprints and to properly gather the necessary evidence to prosecute. Many of today’s top tools of the forensic trade will be taught during this course, including software, hardware and specialized techniques. The need for businesses to become more efficient and integrated with one another, as well as the home user, has given way to a new type of criminal, the “cyber-criminal.” It is no longer a matter of “will your organization be comprised …ver más…

Maintaining Professional Conduct Module 0: First Responder Procedure Electronic Evidence The Forensic Process Types of Electronic Devices Electronic Devices: Types and Collecting Potential Evidence Evidence Collecting Tools and Equipment First Response Rule Incident Response: Different Situations First Response for System Administrators First Response by Non-Laboratory Staff First Response by Laboratory Forensic Staff Securing and Evaluating Electronic Crime Scene Ask These Questions When A Client Calls A Forensic Investigator Health and Safety Issues Consent Planning the Search and Seizure Initial Search of the Scene Witness Signatures Conducting Preliminary Interviews Initial Interviews Documenting Electronic Crime Scene Photographing the Scene Sketching the Scene

http://www.eccouncil.org

EC-Council

Page 

Collecting and Preserving Electronic Evidence Evidence Bag Contents List Order of Volatility Dealing with Powered OFF Computers at Seizure Time Dealing with a Powered ON PC Computers and Servers Collecting and Preserving Electronic Evidence Seizing Portable Computers Switched ON Portables Packaging Electronic Evidence Exhibit Numbering Transporting Electronic Evidence Handling and Transportation to the Forensic Laboratory ‘Chain of Custody’ Findings of Forensic Examination by Crime Category Module 0 : CSIRT How to Prevent an Incident? Defining the Relationship between Incident Response, Incident Handling, and