EH-Net

Hi all - first time poster here!  I have recently completed C|EH and have been considering C|HFI.  Now that I have some knowledge of Ethical Hacking I wanted to get some knowledge of Forensics to get a little better well rounded and then possibly specialize in which ever I find most interesting, my job function does not include Forensics, so I see no reason to get a vendor specific certification at this point.  C|HFI seems to be the best solution for me at the moment.

I was hoping I could get some opinions on the actual certification, suggestions on how everyone studied for it and also some input on how the test is structured (ex. heavy on legal issues/laws, heavy on forensics procedures, needed knowledge of tools/software. . . etc.)

So far I have purchased the Syngress "The Official CHFI Study Guide (Exam 312-49): for Computer Hacking Forensic Investigator " and am currently reading it, but do not see too many other books on the C|HFI cert.  How did everyone else study for this certification.

Any information will be helpful - thanks!

Hello and welcome ;)

I think you'll be good with the CHFI study guide. You are correct, there are not many books out there. The Syngress book is the only official study guide for the exam itself.

There are some new books by EC-Council Press (5 in the series) that can assist with studying and they take a more academic approach:

EC-Council Press - CHFI (http://www.amazon.com/s/ref=ntt_athr_dp_sr_1?_encoding=UTF8&sort=relevancerank&search-alias=books&field-author=EC-Council)

Good luck!

Excellent - looks like almost all of these were just published recently.  This should get me going on the reading assigments.

Thanks much!

No problem. Yep, they were just released on Amazon and everywhere else a couple weeks ago.

I brought the Syngress book too and thought of doing self-study on CHFI.

When I contacted EC Council Asia, they told me they don't support self study as shown here -> http://eccouncilacademy.org/eca/index.php?option=com_content&task=view&id=49&Itemid=66#8

In that sense, they asked me to go for a 5 days course which will cost around USD1500, and they'll give you a free exam voucher.

USD1500 vs USD250.

hmmm, I focusing on other cert instead because my company ain't gonna sponsor me again (yes, due to economic not that good).

kennut, I think that one should be able to do CHFI via self-study. Only thing you need is a voucher and maybe prove that you have experience in security. Maybe you should contact EC-Council directly and ask them (if you are still interested in it).

jeffh, I read too that the Syngress CHFI study guide is good enough to pass the exam if you have already some knowledge in security. ;)

I have a question along these same lines.  I am currently unemployed and cannot afford the $1500 for the class.

The Syngress book was published in 2007 (V3?).  Is this book still valid for the questions being asked in the current CHFI Exam?

Thanks in advance for the help.

The Syngress book is still valid for the CHFI exam, EC-Council list it on their CHFI page: http://www.eccouncil.org/certification/computer_hacking_forensic_investigator.aspx

ISBN: 978-1-59749-197-6

Cheaper via Amazon instead of EC-Council (Elsevier) http://www.elsevierdirect.com/product.jsp?isbn=9781597491976