Image
 
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 17 guests and 2 members online
EH-Net Donations

Enter Amount:
$

Google Ads
EH-Net News Feeds
Latest Additions
Book Recommendations





 
Advertisement

You are here: Home arrow Forum arrow Ethical Hacking Discussions and Related Certificationsarrow Forensicsarrow Which forensics certification is best? And other questions
Ethical Hacker Community Forums
November 23, 2008, 02:23:17 PM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: ChicagoCon 2-Day Ethical Hacking Conference with MS Blue Hats Oct 31 - Nov 1. Tickets Only $100! www.chicagocon.com/content/view/103/51/
 
   Home   Help Calendar Login Register  
Poll
Question: Which (civilian) forensics certification is the best?
CCE - 0 (0%)
CHFI - 2 (40%)
EnCE - 3 (60%)
ACE - 0 (0%)
Other (Please specify in reply) - 0 (0%)
Total Voters: 5

Pages: [1]   Go Down
  Print  
Author Topic: Which forensics certification is best? And other questions  (Read 2999 times)
0 Members and 1 Guest are viewing this topic.
harky
Newbie
*
Offline Offline

Posts: 9

Graduate student seeking Digital Forensics career


View Profile
« on: April 03, 2008, 01:10:47 PM »

Hello All and Thank You for your time,

First an introduction:
--------------------
I am a Master's student in Computer Engineering and Information Assurance at Iowa State University.  I just completed two Bachelor's degrees in Computer Engineering and Computer Science.  Throughout my 7 years of college I have been involved in computer and network security through both work and student organizations.

As part of my graduate assistantship, I have been assisting in a law-enforcement computer forensics lab and assisting with computer forensics investigations.  I have decided that this is the career that I want to pursue. 

I am planning on graduating in December of this year and would like to work in (or within a couple hours of) the Chicago area.  I would be interested in either the law-enforcement or civilian path.
--------------------

Now, the questions:

1) Would obtaining a certification now be particularly helpful in my career search? (As mentioned above, i do have some experience and plan to continue my current work through December.)

2) What are the differences between the certifications? (For example, does CHFI focus more on network intrusion/attack/etc. investigations than the CCE?)

3) Which certification exams can be taken without attending a formal training/boot camp?

4)Which certification would people recommend for my situation/goals?

5) DOES ANYBODY KNOW OF ANY POSSIBLE FUNDING/ASSISTANCE WHICH CAN BE USED TOWARDS TRAINING/CERTIFICATIONS?

6) Any recommendations for networking/career searching to locate careers in the field?


Here are some ideas I have currently.  Your comments are encouraged and welcome.  After 7 years of school (without parental financial support) I really do not have money laying around and being able to avoid additional debt would be ideal. (Thus why question 6, above, could be a huge help).

1) Additional self study and then apply to take the CCE exam.

2) Take a small loan and attend ChicagoCon 2008 for networking opportunities. (Does anyone know if they use interns? I know some other conferences allow students to act as interns (assist with check-in, setup activities, etc.) and attend the conference events for free. If so, who would I contact?)

3) Take a large loan (student loan if possible) and attend ChicagoCon 2008 and take the training for CHFI.  (Does anybody know if there are any prerequisite training/experience/certifications/etc. for this?)

4) Wait until I have an employer and obtain training and certification as they deem fit (and as they will fund).

5) Do both 1) and 2).


Well, if you read this far, I greatly appreciate your time.  Your comments, suggestions, etc. will be very appreciated.

Thank You for your time.
« Last Edit: April 03, 2008, 01:21:01 PM by harky » Logged

Iowa State University
MS Student: CprE and InfAs
BS-CprE & BS-ComS
Graduating: Dec. 2008
pseud0
Full Member
***
Offline Offline

Posts: 139



View Profile
« Reply #1 on: April 03, 2008, 01:55:04 PM »

Just some quick input, but a lot of people who are "in the trenches" will tell you the EnCE is the most popular technical forensics cert at the moment.  There are a lot of reasons, but they generally come down to:
-EnCase is still the tool of choice for most large scale forensic shops
-It helps give you weight as an expert witness if you have to testify

The second one is more important than you might think. You can have a lot of formal education and more general forensic certs, but still get torn up on the stand when you start to get questions like "are you actually certified in the tools you used when preparing the case against my client?"  Please note that you need to have 12 months of forensics experience to get the cert if you do not want to take the authorized classes.  (64 hours last time I checked)
Logged

CISSP, CISM
harky
Newbie
*
Offline Offline

Posts: 9

Graduate student seeking Digital Forensics career


View Profile
« Reply #2 on: April 15, 2008, 10:31:43 AM »

Hey all,
Thanks for the suggestion and for those of you who voted on the survey.  I definitely still welcome more comments, but figured I would pass on my decision (based off of posts in other forums, and discussions with some other computer forensics investigators).

I am going to be heading to ChicagoCon 2008s for the Conference Only portion on Saturday to take in the presentations and hopefully do some networking.  And then I am going to be working on some self-study and applying to take the CCE exam this summer.
Logged

Iowa State University
MS Student: CprE and InfAs
BS-CprE & BS-ComS
Graduating: Dec. 2008
Artful Dodger
Newbie
*
Offline Offline

Posts: 21


View Profile
« Reply #3 on: April 29, 2008, 09:16:03 AM »

I think this is a good question.  And it really shows the immaturity of this feild.  It is great to be part of something so young in development.  As Psud0 stated, it may be important on the stand.  But then again I know several lawyers and kinda understand how they think...they will look for a weak spot regardless.   Meaning, If you are certified in Encase, they will bust your balls about other technologies or investigative procedures.  It also depends on what you are investigating.  If you are investigating network and internet issues you may get grilled on you knowledge (and proff of) of the netowrking and how you got your conclusions.  Most people here know the law and lawyers dont always play by reality:)

All in all the best idea is to get a 1 or 2 technical certs and 1 or 2 forensic ones.  Being well rounded has never hurt anyone.  As for the "best"...I think it all depends on situation.  hwos that for a long non-answer!
Logged
Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.7 | SMF © 2006-2008, Simple Machines LLC
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.142 seconds with 24 queries.
 
Sponsors

cwnp_moto__120x90.gif

Polls
During the most recent election, I:
 
Support EH-Net


Support EH-Net by
Buying all of your
Amazon items using
the search bar above.

cbtnuggets_logo_125.jpg
Try CBT Nuggets Free!
Recent Forum Topics
Vote For EH-Net

progenic.com
Click here to Vote!

Sadikhov.com
Top IT Cert Sites

binarica.com
Binarica Logo

Add to Technorati Favorites
technorati fave

 
         
Advertisement

© 2008 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.