Study guide

CHFI study guide

Read a lesson, then practice the ideas you want to remember.

Lessons

  1. Secure Wiping, Degaussing, File Shredding Co
  2. Steganography Detection: Spatial/Frequency D
  3. Timestomping Countermeasures: Comparing $STA
  4. Commercial Forensic Platforms: EnCase Forens
  5. Open-Source Forensic Platforms: Autopsy, The
  6. Specialized DFIR Utilities: Eric Zimmerman T
  7. MySQL Forensics: Internal Architecture, Data
  8. SQL Server Forensics: SSMS, ApexSQL, SQLCMD
  9. Web Application Firewall Architecture, Audit
  10. Chain of Custody Documentation, Evidence Pac
  11. Electronic Discovery Reference Model & Legal
  12. Expert Witness Testimony, Report Writing Sta
  13. Bit-Stream Disk Imaging, Physical vs. Logica
  14. Forensic Image Formats & Cryptographic Hashi
  15. Hardware and Software Write-Blockers: Operat
  16. AI-Assisted Forensics, GitOps, Automation/Or
  17. Cybercrime Classifications, Forensic Science
  18. Indicators of Compromise, Cyber Attribution
  19. RFC 3227 Order of Volatility, Live vs. Dead
  20. Browser Artifact Recovery, Private Browsing,
  21. Multimedia Forensics: Image, Audio & Video A
  22. Social Media, Social Engineering, Insider Th
  23. Virtualization, Container & Microservices Fo
  24. Physical Evidence Packaging, Anti-Static/Far
  25. First Responder Duties: Crime Scene Containm
  26. Forensic Laboratory Accreditation: ISO/IEC 1
  27. Cybercrime Statutes, Privacy Compliance, CAN
  28. Fourth Amendment, Warrant Exceptions, Workpl
  29. Federal Rules of Evidence & Daubert/Frye Sta
  30. International Standards: ISO/IEC 27037, ACPO
  31. .NET Managed Malware Analysis & the GOOTLOAD
  32. Dynamic Malware Analysis: Sandboxing, Proces
  33. Volatile Memory Acquisition: RAM Capture, Cr
  34. Static Malware Triage: Strings, PE Headers,
  35. Memory Analysis with Volatility 3: pslist, p
  36. Cloud Forensics: AWS CloudTrail, Azure Activ
  37. IoT Forensics: UART/JTAG Physical Interfaces
  38. Mobile Artifact Analysis: Call Logs, SMS/Cha
  39. Mobile Device Forensics: Manual, Logical, Fi
  40. Blockchain Transactions, Cryptocurrency Trac
  41. Dark Web, Tor Network, Onion Routing & Hidde
  42. Fileless Malware, In-Memory Execution & Livi
  43. IoT & Operational Technology Forensic Fundam
  44. Email Forensics: RFC 5322 Headers, Authentic
  45. Network Device & Service Log Forensics: Fire
  46. Network Forensics: PCAP Analysis, Protocol D
  47. SIEM Event Correlation, Cross-Source Timelin
  48. Investigating Directory Traversal, Command I
  49. Web Server Forensics: Apache/IIS Access Logs
  50. Wireless Network Forensics: Rogue APs, Evil
  51. File Signatures, Magic Bytes, Hex Headers/Fo
  52. Linux File Systems: ext2/ext3/ext4 Inode Arc
  53. macOS File Systems: HFS+ and Apple File Syst
  54. Partition Tables & Boot Structures: MBR, GPT
  55. RAID Reconstruction & SSD Forensic Challenge
  56. Storage Media Architecture: Sectors, Cluster
  57. Python for Digital Forensics: Parsing Raw Ar
  58. Reverse Engineering & Password Cracking: Ghi
  59. Forensic Tool Testing & Validation: NIST CFT
  60. FAT12/16/32 and exFAT Architecture, Director
  61. NTFS Artifacts: Alternate Data Streams, Volu
  62. NTFS Architecture: Master File Table Record
  63. Windows Event Log Forensics: Security Audit
  64. Execution Artifacts: Prefetch, Shimcache, Am
  65. Windows Registry Forensics: SYSTEM, SOFTWARE
  66. User Activity Artifacts: ShellBags, LNK Shor