Skip to content
CertMapCertMap

CHFIEC Council Computer Hacking Forensics Investigator

EC-CouncilPersonnel certification (ISO 17024)Security Operations

Created per CertMap methodology · About the editorial team · Official page

Jump to …5 sections

What is CHFI?

The CHFI certifies skills in forensic investigation following a security incident. The exam covers computer forensics fundamentals and the cybercrime investigation process, disk and file system analysis, data acquisition and duplication as well as recognising anti-forensic techniques, plus operating system forensics for Windows, Linux and Mac, network, malware and web attack forensics, and forensics in cloud, mobile and IoT environments. According to the provider it addresses forensic analysts, cybercrime investigators, malware analysts, and security professionals in government and enterprise. The certification is accredited to ISO/IEC 17024 by ANAB and recognised under the US DoD 8140 directive.

Quick facts

AccreditationISO/IEC 17024 by ANAB
Languages
RecognitionGlobal

Cost, prerequisites, exam & renewal

Cost over 5 years

Exam fee (acquisition)€874
AMF (5 years)€368
5-year total€1,242
How is TCO calculated?

CertMap score and matching roles

Rating

Market recognition
2/3
Scheme quality
2/3
Practice evidence
1/3
Maintenance
1/3

Matching NICE roles

Design and DevelopOperational Technology (OT) Cybersecurity Engineering
Protect and DefendInfrastructure Support
Protect and DefendDigital Forensics
Protect and DefendIncident Response

What are NICE roles? The framework explained

More certifications

Daniel Heessel, CISO of the Year 2026

Personal consulting

Not sure what's next? Ask someone who knows.

Personal strategy instead of weeks of self-research. Vendor-independent, with auditable recommendations and transparent sources.

Open consulting
CHFIView in quadrant