Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 80 guests and 1 member online
 
Advertisement

You are here: Home arrow Ethical Hacking Discussions and Related Certificationsarrow Forensicsarrow career in computer forensics
EH-Net
May 20, 2013, 08:39:02 AM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Go back to The Ethical Hacker Network Online Magazine Home Page
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: career in computer forensics  (Read 7225 times)
0 Members and 1 Guest are viewing this topic.
scucci
Newbie
*
Offline Offline

Posts: 29


View Profile
« on: October 02, 2008, 04:01:11 PM »

I'm very new to computer forensics and I've been looking into learning as much as I can over the next few months. I'm currently working as an IT Security Analyst and wanted to know what information, books or certifications are suggested.

Thanks,

Scucci
Logged
dalepearson
Sr. Member
****
Offline Offline

Posts: 357


View Profile WWW
« Reply #1 on: October 02, 2008, 04:16:09 PM »

I think it depends on the tools you will use.
I studied the EnCE as EnCase was the tool I used at work when I used to do forensics.
Logged

$w33p3R
Newbie
*
Offline Offline

Posts: 30


View Profile
« Reply #2 on: October 02, 2008, 04:31:56 PM »

I'm very new to computer forensics and I've been looking into learning as much as I can over the next few months. I'm currently working as an IT Security Analyst and wanted to know what information, books or certifications are suggested.

Thanks,

Scucci

You might check out the ECFI (EC-Council Certified Forensics Investigator) courses.  It seems to fit along the lines of what you describe you are looking for.
Logged

MCP, CEH
BillV
Hero Member
*****
Offline Offline

Posts: 1892


View Profile WWW
« Reply #3 on: October 02, 2008, 06:44:14 PM »

Quote from: $w33p3R
ECFI (EC-Council Certified Forensics Investigator) courses.

* CHFI - Computer Hacking Forensic Investigator Wink

BillV
Logged
Ketchup
Hero Member
*****
Offline Offline

Posts: 1021



View Profile
« Reply #4 on: October 02, 2008, 11:48:31 PM »

I have to be honest, there is a lot of bias in the computer forensics industry.  Consulting companies prefer to hire ex-law-enforcement for forensics positions.  I can certainly understand why.  While you can go to EnCase or FTK training, you don't pick up investigative experience in the process. Cops and Feds always begin as regular agents / detectives before they become computer forensics investigators.   

Having said that, it is possible.   Part of my current role is computer forensics.  I would never want to be a full time investigator, because it is quite boring work most of the time.    It is certainly not as glamorous as it appears on TV.   Another issue with private sector computer forensics is that you are not really working on cases that will directly "help people."  Most cases are Intellectual Property or Employment related, and are quite characteristic of our suit-happy society. 

Now that I got that out of the way Smiley   I would agree on going to Beginner and Intermediate EnCase training.    This is expensive and is easier to swallow if your employer pays for it.   Your best certification for private sector forensics is CCE.  If you live in United States, CCE may actually be required, together with a PI license in your state, and possible soon to be in all states.   

Since you are coming from the InfoSec world, you can transition into incident response and analysis fairly quickly.   Consider searching for a company that specializes in this, and also does something similar to your present role.   Moving within a firm is much easier then coming in as an entry-level forensics analyst.   

The best markets for private sector computer forensics are DC, NYC, and the West Coast.   There are others, but nowhere as saturated as these. 
You may also want to check USAJOBS.com for computer forensics work.   The site publishes civilian job ops for government agencies.   You could also consider going in as an agent into the FBI, Secret Service, INS, etc.  While starting salaries tend to be mediocre, you quickly ramp up to six figures (5-8 years).   It tends to flatten out after that.

One thing you can consider is going into e-discovery first.   E-discovery is less rigid and requires less investigative experience.   It's a good stepping stone into forensics.   
Logged

~~~~~~~~~~~~~~
Ketchup
scucci
Newbie
*
Offline Offline

Posts: 29


View Profile
« Reply #5 on: October 03, 2008, 02:56:46 PM »

Thanks everyone for all your help and opinions.

Scucci
Logged
$w33p3R
Newbie
*
Offline Offline

Posts: 30


View Profile
« Reply #6 on: October 03, 2008, 06:49:28 PM »

Quote from: $w33p3R
ECFI (EC-Council Certified Forensics Investigator) courses.

* CHFI - Computer Hacking Forensic Investigator Wink

BillV

LOL BillV, I must have been smoking crack when I made that post.  I jacked it all up.  Thanks for the correction Smiley
Logged

MCP, CEH
BillV
Hero Member
*****
Offline Offline

Posts: 1892


View Profile WWW
« Reply #7 on: October 04, 2008, 09:17:07 AM »

Quote from: $w33p3R
LOL BillV, I must have been smoking crack when I made that post.  I jacked it all up.  Thanks for the correction Smiley

Haha, you were sorta close Smiley
Logged
Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.066 seconds with 23 queries.
 
Exclusive Deal

sansfire13_245x90_cw90.jpg
SANSFIRE 2013
June 15 - 22

5% Off w/ Code: EHN_5

SANS Deals 4 EH-Netters
5% OFF Any SANS Course in Any Format!
Coupon Code: EHN_5 Including SANS Rocky Mountain 2013 & SANS Boston 2013
Polls
Compared to this year, 2013 will be:
 
Recent Forum Topics
EH-Net News Feeds
Latest Additions
 
         
Advertisement

© 2013 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.