.

Looking to get into the forensics field, few questions.

<<

Bryce

Newbie
Newbie

Posts: 5

Joined: Mon Apr 26, 2010 8:19 am

Post Mon Apr 26, 2010 8:27 am

Looking to get into the forensics field, few questions.

I'm wanting to get into the computer forensics field and just wanted to know how I should go about it.  Is a certification course from my local college enough to get into an internship or something and are there jobs even out there right now for forensics?

Also, have you ever had cases where you've had to sift through someone's computer that was running Linux?  Just a curious question really.  I used to be like use Linux it's all pro and stuff in high school and all, but now I'm like meh.  If you like it use it lol.
<<

Bryce

Newbie
Newbie

Posts: 5

Joined: Mon Apr 26, 2010 8:19 am

Post Mon Apr 26, 2010 10:07 am

Re: Looking to get into the forensics field, few questions.

I know there's gotta be someone with some advice.
<<

JollyJokker

Post Mon Apr 26, 2010 12:37 pm

Re: Looking to get into the forensics field, few questions.

Personally, I see Forensics as the ultimate Security profession whatever this implies. I can not imagine somebody heading straight to Forensics as it is a field that needs massive experience in almost any kind of technology.

One can probably trade some years of experience by gaining important academic knowledge through postgraduate studies.

Generally speaking, I see Forensics as the top of everything within the IS field. Probably I am wrong so I expect to hear many opposite opinions.
<<

Ketchup

User avatar

Hero Member
Hero Member

Posts: 1021

Joined: Fri Jul 04, 2008 7:44 pm

Location: Philadelphia, PA

Post Mon Apr 26, 2010 1:24 pm

Re: Looking to get into the forensics field, few questions.

Forensics can definitely be an interesting career choice.  It's not for everyone though.  You don't go straight into forensics most of the time.  I think that the best path for this career is a 4 year college degree in a related field and a subsequent job with the government.  In the US, the FBI, Secret Service, Customs, and many other organizations have forensics investigators on staff.  People coming out of these agencies are highly regarded on the job market. 

Linux is just another operating systems.  It isn't much different to forensically analyze than Windows.
~~~~~~~~~~~~~~
Ketchup
<<

rattis

User avatar

Hero Member
Hero Member

Posts: 1172

Joined: Mon Jul 27, 2009 1:25 pm

Post Mon Apr 26, 2010 1:30 pm

Re: Looking to get into the forensics field, few questions.

I'm no expert. Far from it. But here is what I've seen.

schools will give you a good baseline to start with (so do certification exams). Any time you can get training is not a bad thing. However find out the people you can intern with and see what they say about the program.

Learn to be an administrator. It helps. Not just with Pen-Testing. You need to know the layout of how the server should look. Know if something doesn't belong (like ...).

Pick up a scripting language for help with log analysis.

Doing Nix isn't all that different than doing Windows (from my experience). Make a forensically clean copy of the data, and then work with that. (At least I never work with the original).

Lastly, make sure you know your local laws. Where I'm at for example, you have to have a PI License, or work for a PI Firm (from the way I understand the law).
OSWP, Sec+
<<

Bryce

Newbie
Newbie

Posts: 5

Joined: Mon Apr 26, 2010 8:19 am

Post Mon Apr 26, 2010 3:15 pm

Re: Looking to get into the forensics field, few questions.

I've been to school twice, never finished because I never found it interesting.  But they had me doing all that other crap that was useless to what I was going for.  Figured a few certifications in some things might help with finding a job in this area.  Anything really in the security field.

I've already got my A+/Net+ certifications and I'm thinking about getting something in security, and figured forensics would be a nice choice and because it seemed interesting and all to me.
<<

rattis

User avatar

Hero Member
Hero Member

Posts: 1172

Joined: Mon Jul 27, 2009 1:25 pm

Post Mon Apr 26, 2010 4:48 pm

Re: Looking to get into the forensics field, few questions.

@Bryce

Stuff I've done forensics wise was pretty boring.

1) go look at USER X's hard drive to see if he's been surfing porn at work (after user tried to delete the images).

2) go through SALESDROID Z's computer see if she was sending our information to other people without using the work account

3) SALESDROID A sent us back his laptop, but he wiped it first. We need you to recover all the data.

No, I'm not kidding either.
Last edited by rattis on Mon Apr 26, 2010 4:53 pm, edited 1 time in total.
OSWP, Sec+
<<

impelse

Hero Member
Hero Member

Posts: 585

Joined: Mon Feb 16, 2009 3:40 pm

Post Mon Apr 26, 2010 10:18 pm

Re: Looking to get into the forensics field, few questions.

What kind of market do you have if you do not want to work with the police and any other force?

Si there a lot market with lawyers and other private firms?
CCNA, Security+, 70-290, 70-291
CCNA Security
Taking Hackingdojo training

Website: http://blog.thehost1.com/
<<

Ketchup

User avatar

Hero Member
Hero Member

Posts: 1021

Joined: Fri Jul 04, 2008 7:44 pm

Location: Philadelphia, PA

Post Mon Apr 26, 2010 10:39 pm

Re: Looking to get into the forensics field, few questions.

You can be an in-house forensics expert.  Larger corporations typically have these.  I work for a consulting company.  We provide forensic services to lawyers.  It's all on the civil side.
~~~~~~~~~~~~~~
Ketchup
<<

impelse

Hero Member
Hero Member

Posts: 585

Joined: Mon Feb 16, 2009 3:40 pm

Post Mon Apr 26, 2010 10:45 pm

Re: Looking to get into the forensics field, few questions.

I was reading in eccouncil.org that it is better to pass CEH before go to forensic, can I go without pass CEH?
CCNA, Security+, 70-290, 70-291
CCNA Security
Taking Hackingdojo training

Website: http://blog.thehost1.com/
<<

rattis

User avatar

Hero Member
Hero Member

Posts: 1172

Joined: Mon Jul 27, 2009 1:25 pm

Post Tue Apr 27, 2010 1:23 pm

Re: Looking to get into the forensics field, few questions.

I do the in-house stuff. I usually recommend hiring an external company for the stuff that is going to court.

impelese, if it doesn't say required, you can probably skip it. But from what I understand the CEH teaches you how to get in to the network, and personally I think that would be a bonus when trying to do the forensics, if you're doing forensics for a network breach.

Anything you can learn and do is a bonus to you / makes you look more valuable.
OSWP, Sec+
<<

melmang

Newbie
Newbie

Posts: 1

Joined: Wed Aug 11, 2010 2:04 pm

Post Wed Aug 11, 2010 2:15 pm

Re: Looking to get into the forensics field, few questions.

I attend college now for computer forensics.  It is online college from an accredited college.  I have to go to school for 4 years.  There is alot more then just the forensics class.
<<

Joshsevo

User avatar

Sr. Member
Sr. Member

Posts: 281

Joined: Tue Dec 29, 2009 11:00 pm

Post Tue Sep 21, 2010 11:44 pm

Re: Looking to get into the forensics field, few questions.

I also am going to school for Computer Forensics & Network Security.  I graduate in June 2011.  I am all done with both majors and now have just a few BS classes.

I was bored one night and sent out random emails to different companies around my town and I got a hit and they are the biggest and best Computer Forensics company in town.  I was able to get hired by them as an intern, although I have not done much with them due to my full time job hrs they are waiting for me to get out of school and then they might bring me on board FT. 

I am helping myself right now by paying for some "boot camp" courses out of my own pocket and I know they will pay off later.

I just got my Security+ and in Oct will have my Network+.  Then in Feb will have my CHFI and then in May have my CEH/CPT.hopefully.  I am paying for these out of my own pocket.  I have to sacrifice a little now for it to pay off in the long run.

Think about it and maybe you should too.
Security+, Network+, C|EH, CHFI, CPT
<<

wmburke

User avatar

Newbie
Newbie

Posts: 17

Joined: Wed Sep 15, 2010 5:20 am

Post Wed Sep 22, 2010 12:53 pm

Re: Looking to get into the forensics field, few questions.

Hi Folks, Wayne Burke here. I am one of the few EC Council Master Trainers. Last year My team and I produced 3 EC Council CBT courses. CEH, ECSA / LPT and CHFI.

From my experience may I suggest that ultimately you would like to certify CEH first then CHFI. If you going to perform the digital forensics of a potential crime then it will be a tremendous benefit to actually learn how they break in before you look at capturing the Forensic Evidence. ::)

If anyone is interested to learn more about these topics send us an email info@sequrit.org and we can arrange a few free video modules from each course. That way you don't take my word but rather test the waters yourself. Our LMS web address is www.secure.com/portal

Last bit to chew on: I specialize in both fields and think about the rapid increase in Cyber Crime, Federal Forensic Investigations take on a whole new challenge.

Have a look at usajobs.gov. Forensics are big in demand.

Regards, Wayne B   
"If the only tool you have is a hammer, you tend to see every problem as a nail"
Abraham Maslow
<<

Joshsevo

User avatar

Sr. Member
Sr. Member

Posts: 281

Joined: Tue Dec 29, 2009 11:00 pm

Post Wed Sep 22, 2010 1:52 pm

Re: Looking to get into the forensics field, few questions.

H0nd0CSI wrote:Hi Folks, Wayne Burke here. I am one of the few EC Council Master Trainers. Last year My team and I produced 3 EC Council CBT courses. CEH, ECSA / LPT and CHFI.

From my experience may I suggest that ultimately you would like to certify CEH first then CHFI. If you going to perform the digital forensics of a potential crime then it will be a tremendous benefit to actually learn how they break in before you look at capturing the Forensic Evidence. ::)

If anyone is interested to learn more about these topics send us an email info@sequrit.org and we can arrange a few free video modules from each course. That way you don't take my word but rather test the waters yourself. Our LMS web address is www.secure.com/portal

Last bit to chew on: I specialize in both fields and think about the rapid increase in Cyber Crime, Federal Forensic Investigations take on a whole new challenge.

Have a look at usajobs.gov. Forensics are big in demand.

Regards, Wayne B   


Wayne

I understand what you are saying in reagrds to taking the CEH first but what if I have a little expierence with the Forensics side more than I do the hacker side.  I assume I would pick up on the CHIFI info quicker than the CEH info.  I plan on taking both the CHFI and CEH through Infosec early next yr and can swap one for the other but how important is it really?
Security+, Network+, C|EH, CHFI, CPT
Next

Return to Forensics

Who is online

Users browsing this forum: No registered users and 0 guests

cron
.
Powered by phpBB® Forum Software © phpBB Group.
Designed by ST Software