Home/Training/Computer Hacking Forensic Investigator

Programme Detail

Computer Hacking Forensic Investigator

The Computer Hacking Forensic Investigator programme teaches a structured and legally defensible approach to digital forensics. It covers evidence handling, acquisition,...

Enquire about this programme Back to catalogue

Digital ForensicsRegistration Open

Programme overview

The Computer Hacking Forensic Investigator programme teaches a structured and legally defensible approach to digital forensics. It covers evidence handling, acquisition, file systems, operating-system forensics, network and web investigations, malware, email, mobile, cloud, IoT, anti-forensics, and reporting. Participants will practise the structured handling and analysis of digital evidence while maintaining integrity, documentation, repeatability, and defensible reporting.

Programmes can be delivered via

HRD Corp Claimable

Yayasan Peneraju aligned

EC-Council

At a glance

Course code: EC-024
Provider: EC-Council
Category: Digital Forensics
Status: Registration Open
Duration: 5 days
Price: RM 6,200

What participants should gain

Plan and conduct digital-forensic investigations
Acquire and preserve digital evidence with integrity
Analyse storage, operating systems, networks, applications, and devices
Investigate malware, web attacks, email, cloud, mobile, and IoT evidence
Document findings and produce defensible forensic reports

Participant readiness

Knowledge of networking, operating systems, and information security
Experience in IT, security operations, law enforcement, audit, or investigations is beneficial
Familiarity with command-line tools is helpful

Who this course is for

Digital-forensics analysts, incident responders, SOC analysts, investigators, and auditors
IT and security professionals responsible for evidence collection or technical investigations
Law-enforcement or corporate-investigation personnel working with digital evidence

How the course is delivered

This programme will be conducted through interactive lectures, forensic demonstrations, guided evidence-acquisition and analysis exercises, case studies, tool-based labs, documentation activities, and investigation reporting.

Course outline

Module and topic breakdown

Module 1: Computer Forensics in Today's World

Purpose, scope, legal authority, forensic readiness, evidence integrity, and investigative roles

Module 2: Computer Forensics Investigation Process

Purpose, scope, legal authority, forensic readiness, evidence integrity, and investigative roles

Module 3: Hard Disks, Storage Media, and File Systems

Core concepts, terminology, and purpose of Hard Disks, Storage Media, and File Systems

Module 4: Data Acquisition and Evidence Duplication

Live and dead acquisition, physical and logical imaging, memory capture, and targeted collection

Module 5: Defeating Anti-Forensics Techniques

Forensic readiness, legal authority, scope, integrity, repeatability, and documentation

Module 6: Windows Forensics

Windows file systems, registry, event logs, users, services, tasks, execution, and persistence artefacts

Module 7: Linux and macOS Forensics

Forensic readiness, legal authority, scope, integrity, repeatability, and documentation

Module 8: Network Forensics

Packet captures, flow records, logs, sessions, protocols, metadata, and network-device evidence

Module 9: Malware Forensics

Malware triage, hashes, strings, metadata, packing, imports, behaviour, and indicators

Module 10: Investigating Web Attacks and Web Applications

Preconditions, attack paths, tools, techniques, and indicators associated with Investigating Web Attacks and Web Applications

Module 11: Dark Web and Social Media Forensics

Forensic readiness, legal authority, scope, integrity, repeatability, and documentation

Module 12: Email and Messaging Forensics

Message headers, routing, timestamps, authentication, content, attachments, links, and mailbox artefacts

Module 13: Cloud Forensics

Cloud logs, identities, management events, workload data, storage, network, and provider evidence sources

Module 14: Mobile Device Forensics

Mobile hardware, operating systems, file systems, applications, accounts, communications, and cloud sync

Module 15: IoT Forensics and Forensic Reporting

Forensic readiness, legal authority, scope, integrity, repeatability, and documentation

Assessment and completion

Continuous knowledge checks and facilitator feedback throughout the programme
Completion of guided exercises, scenarios, labs, or case-study activities applicable to the course
Final review or practical activity to confirm understanding of the stated course objectives
Official EC-Council examination and certification requirements depend on the selected training package and current exam version

Availability

This programme has a public intake path. Use the enquiry form below to confirm the next available session or a private cohort.

Programme enquiry

Discuss pricing, delivery, or corporate customisation

Use this form to confirm availability, request pricing clarification, or discuss a private cohort for your organisation.