EC-COUNCIL 312-49v11 考試概覽:

認證廠商:	EC-COUNCIL
考試名稱:	電腦駭客鑑識調查師（CHFI-v11）
考試代碼:	312-49v11
考試形式:	選擇題（MCQ）
相關認證:	認證道德駭客（CEH） EC-Council 認證資安分析師（ECSA）
及格分數:	60% - 85%（依試卷版本而定）
證照有效期限:	3 年
考試時間:	240 分鐘
支援語言:	英文
實際考試題數:	150
考試費用:	650 美元
推薦課程:	CHFI 官方培訓課程
考試報名:	EC-Council 考試報名
範例考題:	EC-COUNCIL 312-49v11 範例考題
考試方式:	可透過線上遠端監考或於 EC-Council 授權考試中心應考
必備條件:	建議具備：2 年資訊安全或相關領域工作經驗；強烈建議完成 EC-Council 官方 CHFI 培訓課程
官方大綱網址:	https://www.eccouncil.org/train-certify/computer-hacking-forensic-investigator-chfi/

EC-COUNCIL 312-49v11 考試大綱：

主題	簡介
主題 1	Defeating Anti-Forensics Techniques: This domain teaches methods to overcome evidence hiding techniques including data recovery, file carving, partition recovery, password cracking, steganography detection, encryption handling, and program unpacking.
主題 2	Data Acquisition and Duplication: This domain addresses live and dead acquisition techniques, eDiscovery methodologies, data acquisition formats, validation procedures, write protection, and forensic image preparation for examination.
主題 3	Cloud Forensics: This domain covers cloud platform forensics (AWS, Azure, Google Cloud) including data storage, logging, forensic acquisition of virtual machines, and investigation of cloud security incidents.
主題 4	Investigating Web Attacks: This domain covers web application forensics including IIS and Apache log analysis, OWASP Top 10 risks, and investigation of attacks like XSS, SQL injection, path traversal, command injection, and brute-force attempts.
主題 5	Email and Social Media Forensics: This domain addresses email crime investigation including message analysis, U.S. email laws, social media activity tracking, footage extraction, and social network graph analysis.
主題 6	Linux and Mac Forensics: This domain addresses forensic methodologies for Linux and macOS systems including data collection, memory forensics, log analysis, APFS examination, and platform-specific investigation tools.
主題 7	Understanding Hard Disks and File Systems: This domain covers storage media characteristics, disk logical structures, operating system boot processes (Windows, Linux, macOS), file systems analysis, encoding standards, and examination of common file formats.