IntermediateCEH v13
Think like an attacker, defend like a professional: the benchmark ethical hacking certification, now powered by AI.
5 days · 40 h✓ Voucher included
From21,900 MAD
CHFI v11 Training in Morocco
Computer Hacking Forensic Investigator v11 (CHFI)
Collect, analyse and present digital evidence with a defensible method, from the incident to the final report.
- Vendor
- EC-Council
- Exam code
- 312-49
- Duration
- 5 days · 40 hours
- Level
- Advanced
Overview
EC-Council's Computer Hacking Forensic Investigator (CHFI) teaches the digital investigation techniques used after an intrusion, insider fraud or data leak. Version 11 covers the whole chain: evidence preservation and chain of custody, media acquisition and duplication, Windows, Linux and macOS analysis, network investigation and malware analysis, as well as newer ground such as cloud, the dark web, mobile devices and IoT.
In Morocco these skills are sought by the incident response teams of banks and telecom operators, by audit and consulting firms, and by organisations subject to law 05-20 on cybersecurity, which must report and handle incidents with the DGSSI and maCERT. A sound investigation must also respect law 09-08 on personal data protection and produce evidence usable for the offences defined in law 07-03 on attacks against automated data processing systems.
Over 5 days (40 hours) you work through realistic cases in the official labs: rebuilding an attack timeline, recovering deleted files, analysing logs and traffic, examining a compromised workstation. The course runs in Casablanca, Rabat or as a live virtual class, and the 312-49 exam voucher is included.
Who is it for?
- SOC analysts and CSIRT / incident response team members
- System administrators who handle compromised workstations and servers
- IT auditors, internal control and anti-fraud teams in banks and insurers
- Cybersecurity consultants who want to offer investigation services
- Compliance professionals and lawyers working on cybercrime cases
Prerequisites
- Good command of Windows, Linux and file systems
- TCP/IP networking and security knowledge (CEH or CND level is a plus)
- 2 years of information security experience recommended
- Official training waives the EC-Council eligibility application
What you will be able to do
- Run an investigation with a rigorous methodology while preserving chain of custody
- Acquire and image storage media and memory without altering evidence
- Analyse Windows, Linux and macOS artefacts to rebuild an attack timeline
- Investigate network, web, email, cloud and mobile incidents
- Detect and defeat the anti-forensics techniques attackers use
- Write a clear investigation report usable by management or in court
Course outline
- 01Computer Forensics in Today's World
- 02Computer Forensics Investigation Process
- 03Understanding Hard Disks and File Systems
- 04Data Acquisition and Duplication
- 05Defeating Anti-Forensics Techniques
- 06Windows Forensics
- 07Linux and Mac Forensics
- 08Network Forensics
- 09Malware Forensics
- 10Investigating Web Attacks
- 11Dark Web Forensics
- 12Cloud Forensics
- 13Email and Social Media Forensics
- 14Mobile Forensics
- 15IoT Forensics
The exam
| Exam code | 312-49 |
|---|---|
| Format | 150 multiple-choice questions (exam 312-49) |
| Duration | 4 hours |
| Passing score | 60%–85% depending on the exam form |
| Validity | 3 years, renewable with 120 ECE credits and the EC-Council annual membership fee |
Career opportunities in Morocco
- Digital forensics analyst / investigator
- Incident response analyst (CSIRT / DFIR)
- SOC analyst, tier 2 or 3
- Investigation and anti-fraud consultant
- Technical expert supporting cybercrime cases
Frequently asked questions
How much does CHFI v11 training cost in Morocco?
Prices start at MAD 19,900. This includes 5 days of training (40 hours), access to the official EC-Council labs, the courseware and the 312-49 exam voucher.
How can I pay for the course?
You can pay by bank transfer or card. Instalments are possible on request, and we can invoice your company if your employer is covering the cost.
Can I take the CHFI course remotely?
Yes. You can attend in a classroom in Casablanca or Rabat, or join a live virtual class. Because the labs are hosted online, the hands-on exercises are identical in both formats.
What is the 312-49 exam like?
The exam has 150 multiple-choice questions over 4 hours. It is taken online with remote proctoring through the EC-Council exam platform, or at an approved test centre where possible. A PC with a webcam and a stable connection is enough for the online option.
What language is the course in and what level do I need?
Classes are taught in French or English; the official materials and the exam are in English. You need a good grasp of Windows, Linux and networking; having done CEH or CND makes the course much easier.
Complementary certifications
Intermediate
BeginnerSecurity+
The benchmark certification for starting a cybersecurity career, recognised by employers in Morocco and worldwide.
5 days · 35 h✓ Voucher included
From10,900 MAD
OffSecAdvanced
OSCP+
Try Harder, but not alone: the most demanding pentest certification on the market, prepared with a coach who guides you all the way to the final report.
10 days · 80 h✓ Voucher included
From29,900 MAD
Related articles
Careers· 8 min read
Cybersecurity Jobs in Morocco: Roles, Skills and Certifications
Cybersecurity is not just hacking: from SOC analyst to CISO, by way of ISO 27001 auditor, each job calls for different skills and certifications. Here is an overview of the main roles in demand in Morocco.
Read the article
Certifications· 7 min read
Cybersecurity certification prices in Morocco in 2026 (in MAD)
How much does a cybersecurity certification cost in Morocco? Here are 2026 prices in dirhams for the 12 most requested certifications, what they cover and the extra costs to plan for.
Read the article
Careers· 6 min read
Becoming a SOC Analyst in Morocco: Duties, Skills and Certifications
A SOC analyst monitors, triages and handles an organisation's security alerts, often in a team and on shifts. Here are the duties, L1 to L3 levels, skills, certifications and practical steps to land a first job in Morocco.
Read the articleReady to earn your certification?
Book a free 15-minute call with an advisor: we assess your level and recommend the fastest path to your goal.