Image
 
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 17 guests online
EH-Net Donations

Enter Amount:
$

Google Ads
EH-Net News Feeds
Latest Additions
Book Recommendations





 
Advertisement

You are here: Home arrow Forum arrow Ethical Hacking Discussions and Related Certificationsarrow Forensicsarrow Looking for advice on pursuing forensics..
Ethical Hacker Community Forums
January 08, 2009, 01:28:59 AM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: ChicagoCon 2-Day Ethical Hacking Conference with MS Blue Hats Oct 31 - Nov 1. Tickets Only $100! www.chicagocon.com/content/view/103/51/
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: Looking for advice on pursuing forensics..  (Read 1891 times)
0 Members and 1 Guest are viewing this topic.
skitch
Newbie
*
Offline Offline

Posts: 1


View Profile
« on: October 23, 2008, 11:05:39 PM »

Hi there,

I am a young university student studying Digital Forensics, with brief experience in computer security (RHCE, OSCP) & the ultimate end-game goal of working for a Law Enforcement Agency.

I wonder if the experience of this forum can help me...

In the long term, what are the steps involved in granting myself potential opportunities for my desired computer forensics career..?

Would I require work experience in the police force/military?
What is the importance of previous computer security placements in the eyes of a potential employer?
Is it mandatory to take numerous certifications? (EC-Council & CompTIA certs.. etc)
Is there an escalation process to obtain certain job roles (e.g. requirement of 5 years in XYZ)

The CFHI definitely has caught my attention for future study,
But until it is worthwhile for me to take the cert, are there any cheap/free resources that i can gain practical experience with? (in the field of computer forensics)

Like pre-canned file carving exercises & hypothetical crime scene scenarios.
(an equivalent example would be the course material of the OSCP or the learning platforms from www.foundstone.com)

While i realise this post drifts and is years ahead of me, i have many questions and a lot of passion. So i appreciate & look forward to your response(s)

Regards.

*edit.. typos & grammar
« Last Edit: October 24, 2008, 01:07:31 AM by skitch » Logged
ElCapitan
Newbie
*
Offline Offline

Posts: 9


Unanimous FTP: the #1 threat to copyrights!


View Profile
« Reply #1 on: November 16, 2008, 09:34:52 AM »

My general advice is to check out the Secret Service. Even consider joining an electronic crimes task force. Chicago has a good one if you are in the area, headed by the Secret Squirrels.

http://www.secretservice.gov/ectf_chicago.shtml

Make sure you get your B.S. degree and maybe go for your masters. Be a specialist in forensics, but don't forget "generalist" skills are critical (IT, business, law, etc). The Feds value solid certs like CISSP, CCNA, MCSE, etc.

Keep your record clean (no MIP, being in college  Tongue). Surprisingly the FBI and SS often recruit young people with degrees and skills because they can "mold" them and progress them through the agency. People coming from private industry often have a lot of baggage.



Logged
pseud0
Full Member
***
Offline Offline

Posts: 154



View Profile
« Reply #2 on: November 16, 2008, 01:32:07 PM »

Just my two cents, but really make a point to pick up the education and certs.  The main reason is that if you do manage to move into forensics there is a high probability that you'll end up having to testify.  The very first hurdle you have to get through is the validation of your background.  Having the degrees/certs helps that process quite a bit.  If you don't have those on your resume then you'll probably get challenged by the other legal team, and at that point they'll cook up all sorts of questions to try and show gaps in your knowledge or understanding of the tools and methods.  (So Mr. Coolforensicsguy, please tell me every difference between the ntfs and ext3 file systems, explain the md5 checksum algorithm in detail, and inform the court why your evidence should be permissible since you used Encase but are not certified)  The caveat to all of this is if you end up in a field where you do forensics for malware.  In that role you usually are more of an incident responder rather than investigations.
Logged

CISSP, CISM
Ketchup
Newbie
*
Offline Offline

Posts: 47


View Profile
« Reply #3 on: November 17, 2008, 04:45:06 PM »

I completely agree with ElCapitan, go for Fed employment.   Secret Service is one option, FBI, Customs, IRS, etc, are others.  A word of caution, you almost never get to be a forensics investigator from the start.   You have to go to Quantico first.   You then become a regular agent, eventually graduating to an investigator.   You can then request to be transferred into a forensics squad.  You will always remain an agent.  In case something major happens, you will be recalled.   You DO want to be an agent.  Agents get higher salary, better benefits, and first chance at juice assignments.   From what I have been told by ex-feds, agents look down on civilian employees.

Certifications are important.   For Federal Agents, the premier cert is CFCE, but it's only available to law enforcement.   For private sector, the cert of choice is CCE.   Interestingly enough, A+ certification still applies and is valued.   EnCE certification is also good.

I also agree that a BS degree is important.   Criminal justice, Information Security, Accounting degrees are highly sought after. 

If you live in a wealthy area, local police force may be an option.  Again, you are a cop first, then you become an investigator. 

Sounds like you are on the right track.  Stay in school and finish your BS degree.   Figure out what kind of investigation you want to concentrate on.  If you like accounting, IRS is good agency.  If you prefer criminal, FBI and Secret Service are great agencies.   Once you pass basic training, it's not unreasonable for you to be making six figures within 5 to 7 years, depending on your level ambition.   After that, the paygrades level out.   At this point, some Feds leave and enter the private sector.  There are few large forensics shops that snatch up Feds quickly.   They are great for gaining consulting experience, but they do not typically pay well.   Boutique shops pay better.   You have to do your research to make sure the shop is stable.  Beware of non-competes.

Anyway, those are my two cents.  I am probably rambling too much.  Who knows, maybe by the time you are done with school, EnCase 10.0 will have a single button, "Solve Case."  The main point is that you have to become an investigator.  Technical skills can be taught, by investigative skills are much more difficult to acquire.

Logged
Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.7 | SMF © 2006-2008, Simple Machines LLC
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.042 seconds with 23 queries.
 
Sponsors

cwnp_moto__120x90.gif

Polls
How many security events including conferences and training do you attend a year:
 
Support EH-Net


Support EH-Net by
Buying all of your
Amazon items using
the search bar above.

cbtnuggets_logo_125.jpg
Try CBT Nuggets Free!
Recent Forum Topics
Vote For EH-Net

progenic.com
Click here to Vote!

binarica.com
Binarica Logo

Add to Technorati Favorites
technorati fave

 
         
Advertisement

© 2009 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.