Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 29 guests and 1 member online
 
Advertisement

You are here: Home arrow Ethical Hacking Discussions and Related Certificationsarrow Forensicsarrow Which computer forensic cert is the most valuable?
EH-Net
May 22, 2013, 04:04:52 PM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Go back to The Ethical Hacker Network Online Magazine Home Page
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: Which computer forensic cert is the most valuable?  (Read 10005 times)
0 Members and 1 Guest are viewing this topic.
YuckTheFankees
Sr. Member
****
Offline Offline

Posts: 324


View Profile
« on: December 11, 2011, 06:15:52 PM »

There are only a few certs that I know about CHFI, GCFA, and EnCE. From your experience or knowledge, can you tell me which one you would prefer and why?

Thanks
Logged

OSCP in progress
xXxKrisxXx
Hero Member
*****
Offline Offline

Posts: 512



View Profile
« Reply #1 on: December 12, 2011, 12:06:54 PM »

I saw the thread wasn't getting too much attention. I figure I'll add on my opinion. I threw each certification onto Dice 1 at a time and noticed EnCE had the most results for open jobs. I'm not a forensics guy on my end, but it looks like be either EnCE or GCFA are top listed. They all look well known in the forensics industry but I would prefer to hold the GCFA due to the GIAC certifications looking really nice on a resume. A job I noticed that was listed for it that wasn't listed for the CHFI and EnCE roles were Malware Reverse Engineer - that sounds pretty wicked. Wink
Logged

eCPPT, GCIH, OSCP, OSWP
pseud0
Recruiters
Full Member
*
Offline Offline

Posts: 208



View Profile
« Reply #2 on: December 12, 2011, 12:59:49 PM »

Think about it in regards to what the certs actually mean.  The GCFA and others like it are meant to show that you're very familiar with the process of forensics and generally familiar with a variety of tools.  The EnCE and others like it are meant to show that you're very familiar with one tool and generally familiar with the overall process of forensics. 

If you're focusing on traditional forensics and face a lot of time on the witness stand, a tool based cert (eg. EnCE) will go far since the opposing lawyers will spend a lot of effort trying to find weaknesses in the various tools and processes you use as well as your experience with each.  If you have a cert in a well known, vetted product like EnCase and you follow your checklists to the letter it is hard to get yourself in trouble and hard for them to portray you as being unskilled/unfamiliar with your tools.

If you're focusing on non-traditional forensics (more incident response focused and less litigation focused) then the general certs will probably go farther as they suggest that your skillset is broad versus deep. (familiar with a lot of tools and platforms rather than being an expert witness in one specific tool)  You can also specialize with additional certs like the GREM for malware, network forensics, etc.  Please note that I'm implying that much of this is about appearances.  I know folks that are skilled in both areas, but many people will eventually choose to favor one path over the other.
Logged

CISSP, CISM, CISA, GCIH, GREM, CEH, HMFIC, KTHXBIROFLCOPTER
YuckTheFankees
Sr. Member
****
Offline Offline

Posts: 324


View Profile
« Reply #3 on: December 13, 2011, 10:08:41 AM »

As of right now I would prefer a job with less litigation but I really don't know enough right now to choose. I think my course of study is to read about 3-5 forensic books..I started http://www.amazon.com/Computer-Forensics-JumpStart-Michael-Solomon/dp/0470931663/ref=sr_1_11?ie=UTF8&qid=1323789441&sr=8-11 and I should be done with it later tonight or tomorrow..

the next book will be http://www.amazon.com/System-Forensic-Analysis-Brian-Carrier/dp/0321268172/ref=pd_sim_b_2

3.http://www.amazon.com/Windows-Forensic-Analysis-Toolkit-Second/dp/1597494224/ref=pd_sim_b_1

4.http://www.amazon.com/Digital-Forensics-Open-Source-Tools/dp/1597495867/ref=pd_sim_b_4

I'm trying to read 75-100 pages a day but I'll probably start taking notes after the 1st book..so the number of pages will probably go down.

After those 4 books, I should have a good understanding of CF..so I'll start studying for the CHFI...then move to GCFA (if the money situation works out)...if I'm not burnt out by that point..EnCE
Logged

OSCP in progress
Joshsevo
Sr. Member
****
Offline Offline

Posts: 278


View Profile
« Reply #4 on: December 13, 2011, 05:23:23 PM »

This book was refered to me by a Sr Computer Forensics Analyst years ago and then a few months later in school this was the one we used as the book for the class.  Very good book

http://www.amazon.com/Digital-Evidence-Computer-Crime-Third/dp/0123742684/ref=sr_1_6?ie=UTF8&qid=1323818518&sr=8-6

Think about picking it up.
Logged

Security+, Network+, C|EH, CHFI, CPT
don
Editor-In-Chief
Administrator
Hero Member
*****
Offline Offline

Posts: 4167


Editor-In-Chief


View Profile WWW
« Reply #5 on: December 15, 2011, 08:43:07 AM »

CCE was always highly regarded as it includes a practical portion of the exam. Not sure how many certs they give out a year or how well they've been doing lately, but thought I'd throw it into the mix:

http://www.isfce.com/certification.htm

Don
Logged

CISSP, MCSE, CSTA, Security+ SME
Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.459 seconds with 23 queries.
 
Exclusive Deal

sansfire13_245x90_cw90.jpg
SANSFIRE 2013
June 15 - 22

5% Off w/ Code: EHN_5

SANS Deals 4 EH-Netters
5% OFF Any SANS Course in Any Format!
Coupon Code: EHN_5 Including SANS Rocky Mountain 2013 & SANS Boston 2013
Polls
Compared to this year, 2013 will be:
 
Recent Forum Topics
EH-Net News Feeds
Latest Additions
 
         
Advertisement

© 2013 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.