If you use the -A option with nmap you may get a better idea of which specific applications/versions are running

I was unable to get work to pay for training, but I did take and pass the EnCE.  The practical gives you a great opportunity to try out all the tools available in EnCase.  Congrats on winning the Offensive Security training!

Thanks for the replies.  CCE is on my radar, but I am currently working towards my CHFI.  Also I would like to take the SANS forensic courses but self study is all my budget is going to handle.

I am in Tampa, FL.  I sent in an application to the Florida Association of Computer Crime Investigators.   I was wondering about anyone's experiences with International Information Systems Forensics Association, High Tech Crime Investigation Association and any others that are not specifically for law enforcement. 

Thanks

Hi, I am interested in getting involved with a professional association that focuses on computer forensics but am not sure which ones are the best for someone trying to get into the field.  I am looking for one that is pretty active,  provides training resources and possibly has regional events.  Is anyone here active in these groups and would recommend getting involved with them?

Thanks

It is pretty tough to get your foot in the door unless you have a good background in different operating systems (linux really helps) and networking.  If you are doing doing a lot of self study, there are many open source and free security tools on which you can get hands on experience. Some of the tools I use on a daily basis include nmap, tcpdump and sysinternals.  Also free applications I use include Snort. Splunk, Nessus, Ossec, Metasploit, Netwitness Investigator and CAIN.  Having experience with these shows initiative and I think that counts for a lot when we are interviewing.

Good luck!

I found the GSEC to cover a wide range of areas (Windows\Linux\Networking) and gave some really good information on tools you need to know if you want to do security.  The training is kind of pricey, but it was definitely worthwhile.  I did the CEH v.5 through self study and did not really find the class materials to be that good.

Get your foot in the door.  I started with a minimum wage job in IT and found I was able to quickly prove my abilities and move up.  Its difficult to get noticed with just a resume, and it is much easier to get quality time with IT decision makers once you are on the inside.

Good Luck!

Thanks for the replies!  I have had quite a few contacts from recruiters who obviously hadn't even bothered to read my resume and try and match me with anything to do with technology. 

Hi, I am looking for anyone who has had a good/bad experience with a technical recruiter/headhunter.  Has anyone gone this route and found a job they really like?

ENISA has the ISO images for their live DVDs available now http://www.enisa.europa.eu/act/cert/support/exercise
They have some really good exercises here and I am looking forward to using them in our training

Thanks Marco.  There are a lot of good materials on the site.  Looking forward to the Live DVDs.

Thanks for the replies!  These are all good ideas.

Hi, I am looking for ideas to revitalize my CSIRT team.  One of the best suggestions I have heard of was having an incident drill so the team members can practice their functions.  Does anyone have some an example of a drill they have run?

Thanks

If you are familiar with FTK, you should at least give the ACE certification a look.  It is free (at least until you renew) and there is a good study guide available on the AccessData site.  It also includes a practical in the exam which will give you some experience which you will need if you decide to pursue the CCE or EnCE