New Today: 1
New Yesterday: 7
· KS – an open source bash script for indexing data
· Mobile Device Geotags & Armed Forces
· Categorization of embedded system forensic collection methodologies
· Interpretation of NTFS Timestamps
· What are ‘gdocs’? Google Drive Data – part 2
· What are ‘gdocs’? Google Drive Data
· Bad Sector Recovery
· Forensic Artifact: Malware Analysis in Windows 8
· Windows 8: Important Considerations for Computer Forensics and Electronic Discovery
Interview & Physical Test Of Computer Skills
As it's law enforcement in addition to technical skills make sure you familiarise yourself with current laws concerning the use of computers.
As for technical skills I would make sure you are prepared for questions on common hardware, disk geometry, how file-systems work and details about what a computer is doing when a user is operating it (scenario based questions).
You may well be asked how you would deal with a sample scenario in which you are attending a scene and then analysing the evidence. Give it some thought now on what issues you would have to face and how you would deal with that.
One thing you might want to bear in mind is the person interviewing you might also be a member of this forum, so they might have seen you asking for advice and will expect you to be well briefed.
Steve Falkner, Forensic Computer Examiner, Computer Systems Laboratory, Metropolitan Police, London, UK
- Senior Member
Good Luck, my advice is look at ACPO, Must admit Ive always wanted to get a job in the HTCU. So hope you do well and fingers crossed let us know how you get on
- Senior Member
- Senior Member
Hi ..I wouldnâ€™t worry too much about disk geometry & file systems at an interview stage! Granted a very important area but I would be amazed if they asked you this.
If I were interviewing someone who I saw had firstly realised that forums exist in forensic computing, secondly found one open to the â€˜general publicâ€™ and then posted asking for advice would get a great deal more â€˜pointsâ€™ than someone who could tell me what a master boot record was.
Keep your research brief, as mentioned ACPO guidelines, what the BOIS is, how would you overcome the stress at looking at children being sexually abused, give an example where you displayed a high degree of integrity etc etc.
Donâ€™t blind them with science you wonâ€™t be expected to know everything at such an early stage, however you will be expected to develop your own learning development so have a look what training is available to HTCU staff and at an appropriate moment during the interview maybe tell them how you could develop?
If it helps, within my first year I completed the following training courses:
-Core Skills in Data Recovery & Analysis (Wyboston)
-Forensic Computing (Cranfield University)
-Forensic Internet (Cranfield University)
What is your perception of what a HTCU actually does? Some people think that we login to a bank of computers deep inside our Force HQ monitoring a vast army of botnets sweeping across the globe ready to attack somewhere our force area costing Â£Â£millions.
Whatever your vision is â€¦.keep it simple & good luck
PS â€¦No I donâ€™t work for South Wales (Iâ€™m far superior)
My first post too!
- Review of Application Form looking for:
- 3+ years solid IT background preferably doing some sort of software development
- IT qualification if possible but not necessary if candidate can pass technical examination (most of my staff have BSc and some MSc also)
- 3.5 hours of written technical (1.5 hour multiple choice / 2 hour written) examinations covering everything from:
- Data recovery
- Disk Geometry and File Systems
- Legislation & Legal
- Forensics / Counter Forensics
- Operating Systems
- Internet protocols
Reason for this is - coping with the legal side of things and learning forensic skills is a lot to take in and get up to speed with so I look for solid IT background as a base.
- Candidates who pass stage 2 will go forward to a full day of group exercises and presentations
- 10 minute autobiography (unprepared)
- 10 minute presentation on technical subject (prepared)
- 2 Group exercises
- Group discussion exercise on topical subjects
- 45-60 minute formal interview covering areas such as
- Motivation for becoming involved in the work
- Concept of role and type of work involved / challenges / motivating themselves
- Working in police environment
- What have they done to prepare for whole process
- Strengths and weaknesses
- Future of digital forensics
- 3 Practical Scenarios to evaluate
- Integrity issues
- Stress and coping with high workloads / exposure to material
- Communication skills (verbal / non-verbal)
- Continued Professional Development
- Where they see themselves in 5 years
- Greatest achievements
- Greatest failures
- What motivates them
- Individual as a person
- Support of family / friends
- Unsocial working
- Steep learning curve etc
Just a flavour for you.
Once recuited - they are on an 18 month probationary period where they are on a career development plan during that time where all internal/external training is mapped out.
Craig Wilson, MSc MIET MBCS CITP
Digital Detective Group
UK: 0845 224 8892
US: 202 436 9722
Last edited by rcw8892 on Fri May 11, 2007 8:28 am; edited 1 time in total