Validates knowledge of digital forensics, including evidence handling and analysis of disks, operating systems, networks, cloud and mobile.
A good CHFI course teaches the forensic process and the tools, and CHFI also requires official training or two years of security experience before you can book. We compared the official options on eligibility, hands-on labs and price.
Take EC-Council's CHFI video course if you lack two years of security experience or want training, labs and the exam in one package. If you have the experience, buy the e-courseware and add Labs CHFI, which costs less but needs an eligibility application.
| Course | Best for | Format | Price |
|---|---|---|---|
 CHFI single video course | Training and exam in one | Video | $2,199 |
| CHFI v11 e-Courseware | Self-study with experience | Book | $650 |
| Labs CHFI | Forensics lab add-on | Interactive | $199 |
EC-Council's official on-demand course for CHFI v11 includes a year of streaming video, the e-courseware, six months of CyberQ labs, a certificate of completion and the certification exam. It counts as official training for eligibility.
Great fit if you do not have two years of security experience, or want training and exam in one package
Poor fit if you have the experience and want to spend less; buy the e-courseware and add Labs CHFI
The official CHFI v11 course book and lab manual in digital form, with downloadable tools and set-up instructions in the courseware. It has no instructor or video lessons.
Great fit if you are self-studying and want the official material
Poor fit if you lack two years of security experience or want video lessons; choose the video course
Six months of browser access to EC-Council's cloud lab, with virtual machines preconfigured with forensic tools and evidence files. You launch the machines from a portal in a few clicks.
Great fit if you need a ready-made forensics lab to go with the courseware
Poor fit if you need lessons; it has no teaching content, so pair it with the e-courseware
EC-Council's CHFI video course if you want training, labs and the exam in one package. If you have two years of security experience, the e-courseware with Labs CHFI costs less.
Yes, if you have two years of security experience. Buy the e-courseware, apply for eligibility with the $100 fee, then book the exam.
Plan for about 90 hours of preparation. Allow the high end if forensic tools and evidence handling are new to you.
No. Official training or two years of information security experience both qualify you, but EC-Council must confirm it before you buy a voucher.