Notifications
Clear all

EnCE Training

16 Posts
6 Users
0 Likes
1,940 Views
bh47100
(@bh47100)
Posts: 8
Active Member
Topic starter
 

Hello,

Just wondering if there is anyone holding a EnCE (Encase Certified Examiner) certification. I am looking into becoming certified and would like to know if it is a worthwhile certification and also if the Version 4 software is worth the $2700.

Thanks in advance,

Brandon

 
Posted : 19/08/2004 6:56 pm
 Andy
(@andy)
Posts: 357
Reputable Member
 

Hey there, looks like we are the first to post. I hope your forum takes off 🙂

EnCase - worth the money? Depends on what you need it for. If running a forensic computing business or law enforcement agency the yes - its probably the best tool. There are others such as FTK and Smart (Linux) but EnCase seems to have more support. It does the job quick and has a simple easy to understand interface (but perhaps that just because I'm very used to it).

If I was freelancing and could not afford the $2.5K licence - I'd probably use Linux.

EnCE - is it a good qualification? I'd say yes, but not essential.

 
Posted : 19/08/2004 8:45 pm
Jamie
(@jamie)
Posts: 1288
Moderator
 

Welcome both to Forensic Focus (and thanks for kickstarting the forums!)

I think I share Andy's take on EnCase and the related certification. Just one question though Andy, if you don't mind me asking, do you already have the EnCE? If not, is it on the cards?

Cheers,

Jamie

 
Posted : 20/08/2004 12:49 am
bh47100
(@bh47100)
Posts: 8
Active Member
Topic starter
 

Thanks for the insight. (both of you) I am graduating next month with a CIS degree and want to specialize in a computer forensic area. My Masters classes start soon for my MISM and I will focus on security related topics. I am spending my time now determining which certifications, publications, web sites, training facilities, software and other venues have rewarding information and respected products and services. This field is a little behind the scenes but growing rapidly in the private sector. I would really like to get involved. I am familiar with Hex Editors, basic file reconstruction and software data recovery. I asked about EnCE just because the articles I have read regarding certifications in this arena have all mentioned EnCE and Certified Computer Examiner (CCE). I am also looking at training facilities and browsing for job opportunities in the field, but experience seems to be the key. Any advice or suggestions would be appreciated, and also info on how you guys got started or what field you are in may be helpful as well. Thanks again. Hope the site does well.

Brandon

 
Posted : 20/08/2004 6:01 pm
Jamie
(@jamie)
Posts: 1288
Moderator
 

Yep, Guidance market well (that's not a criticism!)

Personally I got into this field as I had a background in network administration, a huge interest in computer forensics and a friend who knew someone working in the field with a vacancy in their team. The first two are easy, the last almost impossible to arrange…I just happened to be in the right place at the right time. Perhaps the lesson is that personal contacts (e.g. through forums, conferences, discussion lists, etc.) can make a difference.

You're right to say that experience is the key but it's often a chicken and egg situation. In the meantime, until you get your foot on the ladder, I recommend reading as much as possible and experimenting with whatever software/hardware you can. Training appears to be improving as far as the range of courses is concerned but it's slow progress. One further option may be to contact local law enforcement to see if you can assist on a voluntary basis, e.g.

http://www.oregonlive.com/news/argus/index.ssf?/base/news/1089149447234670.xml

No idea how widespread such schemes are but worth a shot if LE work appeals, I guess. Anyway, best of luck and good to have you around the forums.

Cheers,

Jamie

 
Posted : 20/08/2004 6:58 pm
 Andy
(@andy)
Posts: 357
Reputable Member
 

I agree that the very best way to learn this business is practice - trial & error. For example if I want to investigate how a website had been hacked, I made my own site and learnt how to manage one (I had no experience web authoring/management prior to this).

Most people who venture into the field already have a good idea how computers work, some better at the technical side than others, but the most valuable skill is investigation and knowing how the legal system works, and that’s something often comes with experience. Which brings us onto the chicken & egg situation.

Andy

 
Posted : 21/08/2004 9:18 am
Jamie
(@jamie)
Posts: 1288
Moderator
 

Thanks Andy, some valuable food for thought there. Appreciate the time taken to reply.

Cheers,

Jamie

 
Posted : 21/08/2004 11:55 am
bh47100
(@bh47100)
Posts: 8
Active Member
Topic starter
 

Thanks to both of you for the good advice. After all the reading I have been doing I can see that Jamie is quite the source for information. I enjoyed many of your articles.

Andy, I had a question for you regarding Police work. The majority of the investigations in my area seem (as I have read) to be handled by our Bureau of Criminal Investigations. Is that the trend for most states or is it common for the local police department's to handle a forensic computer investigation.

I have decided to get my CCE this next year, and work from there. I am quite skilled as a programmer, but it is just not a subject of interest for me anymore. I am thinking I will travel this path and get certified with the CCE, EnCE, and GIAC Certified Forensic Analyst (GCFA). Then I will focus on finding a position within an organization, maybe a CSIRT job that has an entry level position open. The private sector seems to be the way in. I will also see, after I accomplish that, if there is a way to do some volunteer work for the local PD's or maybe the BCI will have something available by then. Until then I will play behind the scenes and absorb as much knowledge as I can from the net, books, and training. I know it's not as good as real world experience, but sometimes you have to just dig in to get in.

Best to you both,

Brandon

 
Posted : 22/08/2004 1:44 am
 Andy
(@andy)
Posts: 357
Reputable Member
 

Not all who work in those police deparments are police officers, some are civilain support staff. So if I were you and wanted to get a start in computer forensic criminal investigation, i'd try making enquiries with your nearest law enforcement agency. They just might be looking for staff, and someone with a programming background might be what they are looking for.

 
Posted : 22/08/2004 8:38 am
(@hitechpi)
Posts: 11
Active Member
 

If you are going to stay in or enter the Computer Forensics field, expect to spend a few thousand dollars, and get as much training, hardware, and software you can afford. Master one of the leading forensics softwae programs, at least.

Check with your local police or sheriff's office and find out if they have a computer forensics unit. If not, you might find your skills could be needed there.

 
Posted : 24/08/2004 1:46 am
Page 1 / 2
Share: