±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 35244
New Yesterday: 3 Visitors: 259

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Webinars

CHFI

Computer forensics training and education issues. If you are looking for topic suggestions for your project, thesis or dissertation please post here rather than the general discussion forum.
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
Page 1, 2, 3  Next 
  

Lewis
Member
 

CHFI

Post Posted: Nov 01, 05 09:10

Have any forum members attended the CHFI course offered by The Training Camp in the UK? If so, it would be great to hear your feedback/views, not only on the course but also on the qualification in general. For example, was the course/exam fairly elementary or does it delve deeply into forensic computing concepts and practices? Also, how is the CHFI qualification viewed within the industry? How would it compare with the CCE?

Having looked at the syllabus on the EC-Council website, the course content seems somewhat geared to the American market e.g. FBI Procedures, Federal Laws, Patriot Act etc. Is the course and exam content offered in the UK suitably adapted?

If you haven’t attended the CHFI course, have you attended any other courses run by The Training Camp in the UK? If so, how do you rate their teaching methods, do you feel they offer value for money?

Finally, has anyone taken the CHFI exam without attending the associated course? If so, what study material did you use?

Thanks in advance.

Lewis  
 
  

arashiryu
Senior Member
 

Re: CHFI

Post Posted: Nov 01, 05 15:27

Checked out the site. They cover quite a bit. But do not see any practicals for testing.

Most Computer Forensic Certifications have practical requirements to pass. For example, EnCase, CCE etc...

I have CCE. The big difference I see is that CCE is more hands on. In addition to an online exam, you have to pass 3 practicals. I learned quite a bit doing the practicals. Felt like I was working on a actual case.

Anyway, won't hurt to attend since they do cover legal and fundamental aspects of Computer Forensics.  
 
  

Lewis
Member
 

Re: CHFI

Post Posted: Nov 01, 05 17:02

Did you undertake any specific training course for the CCE?  
 
  

arashiryu
Senior Member
 

Re: CHFI

Post Posted: Nov 01, 05 17:41

CCE offers self paced and boot camp style. I went with the boot camp. Passed the online exam on site after the boot camp. Then I recieved my 3 practicals one by one. First you do a forensic examination of a floppy. Second a CD ROM and at last the hard drive. Sighhhh... ;~)

I don't believe CHFI offers self paced / online training or practicals as a requirement to attain the certification. Don't get me wrong, it is still a good foundation level cert, but I prefer practical aspect of the examinations.  
 
  

samr
Senior Member
 

Re: CHFI

Post Posted: Nov 02, 05 08:37

I did this online course: reg.coned.kennesaw.edu...2ZCCP3130A . This course is equivalent to 150 hours of training and is approved training for the CCE. The course covers examinations of floppys, CD-ROMs and harddisks as well as background and filesystem information. I found doing the CCE examination after the course was very similar if not slightly tougher then the assessed exercises throughout the course.

To enter for the CCE you either need 18 months reporting experience, self certified training or some approved training.  
 
  

bjgleas
Senior Member
 

Re: CHFI

Post Posted: Nov 02, 05 13:35

- Lewis
Finally, has anyone taken the CHFI exam without attending the associated course? If so, what study material did you use?


I took and passed the CHFI last year. You can order (at least you could) self-study materials from their website. It consists of a couple of binders, two books, and a few cds of tools. It is the same materials you get if you attend the class.

After a few months of study, I was ready to take the exam, and ran into problems. It turns out it is not (thing may have changed, I haven't checked) a standard prometrics exam - it is a proctored exam. It is normally given at the end of the course and the teacher is the proctor - you can not just go to any testing center an take it. I contacted several training centers who offer the CHFI course, and none of them would proctor me unless I took (or at least paid for) the course. I contacted ec-council, and they said pretty much the same thing - so I asked them why they sold self study materials if you had to take the course. After many phone calls, they finally arranged for a proctor.

As for the test itself, it is detailed and tough - but not impossible. But it doesn't have a practical component, so like others, I view it as an entry-level exam - book knowledge, but no documented experience.

bj  
 
  

yey365
Newbie
 

Re: CHFI

Post Posted: Nov 03, 05 11:42

I attended the CHFI course at the Taining Camp. The week begins on Sunday evening and you can expect to have to put in up to 70+ hours of work before you take the exam on the Friday.

The course is predominantly based on US law but the instructor will draw direct comparison with UK equivalents. The course is based on a FAT32 based analysis tool with limited capabilities for NTFS, HFS and EXT2&3 file systems.

The exam is tough but if you put in the extra hours reading (3 books in the week) in addition to the classroom based time, you should pass (80% required)

Format for the week is lectures in the AM, discussion / lab work PM & reading in the evenings.

Is it worth it? I thought so though I did it to acquire a certification that consolidated forensic skill acquired over several years elsewhere.

Hope this helps,

Jim  
 

Page 1 of 3
Page 1, 2, 3  Next