I am a seasoned computer professional (25 + years on mainframes, UNIX, Windows platform) seeking to move into the Computer Forensic area.

I am seeking a Computer Forensic certificate, please no debates on the value of a certificate vs. experience, I understand the argument.

In your opinion, which Computer Forensic certificate do employers respect the most? Which Computer Forensic certificate will likely get me that first job in Computer Forensics? Please add some reasoning to your answer.

I will be paying for the certificate education with my own monies, so I do not want to make a mistake.

I have searched job sites, DICE and Monster, for how many positions are seeking this certificate and that certificate, but I would like the opinions of many season professionals.

In closing, a BIG "thank you" for your time and effort.


John Dawson  

If you searched DICE and Monster, you should already have the answer. Or at least the most current one. It doesn't really matter what we say, it matters what the want ads say.

That said, traditionally EnCE has been the most requested by employers.

However, I think if you are ONLY getting the certification, you will still be at a disadvantage against those that take classes (vendor classes or college classes). I would strongly suggest taking classes (a college may have a computer forensics certificate. It has the same classes as a degree, but none of the other classes like english, math, etc.  

Thank for your reply!!!!!

I have an associated degree, plus another 30 to 40 hours toward a biology degree.

Using your suggestion, I searched for the term "EnCe" on DICE and Monster, here is the results:

Search Term Number of Jobs
----------------------------------------------------------------------- ------------------------

Certified Computer Hacking Forensic Investigator (CHFI) 4

Certified Computer Examiner (CCE) 23

GIAC Certified Forensic Examiner (GCFE) 33

Certified Forensic Computer Examiner (CFCE) 16

Forensic Computer Examiner (generic term) 43

EnCE (generic term) 38


Only one of the certificate programs using the EnCase tools in the training class, so I would guess that would be an advantage.


Again, thank you!!!!!


John  

John,

With 30+ years IT experience--six in Forensics, I recommend certification that emphasizes both breadth and depth of technological, analytical, and legal aspects. In my opinion, you should know how to competently address each situation/incident/case that you encounter; be able to identify any subject technical devices and typical use; thoroughly analyze said devices with various tools (commercial or open source); produce comprehensive, readable reports; and confidently explain any part of these in layman's terms.

If you are looking for well-rounded, well-respected certification, I strongly encourage a closer look at Global Information Assurance Certification's (GIAC) GFCE and GFCA via SANS Institute. As a plus, SANS courses are core components in their graduate degrees in IT security. Another highly-regarded certification is ISFCE's CCE. The courses and requirements that lead to these certifications will provide the firm foundation and "head start" for anyone entering the field. It's true that the SANS/GIAC route is pricy, though you will find that it's worth your investment. The path of least resistance, monetarily speaking, is the CCE, which is a good place to start.

Guidance's EnCE holds advantage of name recognition, market share and longevity, the drawback is that it is, indeed, tool-specific. If you find yourself targeting specific employment of your skills that will predominately require the use of EnCase, by all means, put this feather in your cap--in addition to one of the aforementioned. I still have the EnCE book--which I have fully read--on my desk and no EnCE certification. Yet, I use EnCase on a daily basis. AccessData's offering is, also, based on a specific toolset (FTK) and, as you have likely noted, does not appear on your research list. While I haven't these tool-centric certifications, I have, thus far, enjoyed a successful forensics career. By the way, I like using both EnCase and FTK; each offers robust features. I, also, frequently employ many other open source tools.

I am quite satisfied with the goals I have set and achieved. That said, I underscore the need to keep up with the neverending stream of new technology and associated "forensic fallout" by sharpening tools through various training and education channels. Keep this in mind as you progress.

I wish you the best with your own career and yield the floor. (I think I'm about out of digital ink...)

Sincerely,

CS  

Mr. Sericks,

Thank you so much for your mindful reply, I do appreciate it!


John Dawson  

Es mi placer, Senor Dawson...de nada.

Buena Suerte!  

Just wanted to add my bit of info on this as our dept is currently looking for a Forensic Examiner with the min req of: EnCE, CFCE, CCE, CISSP, GCFE, and GCFA. I work in computer forensics/incident response for the retail industry. If you have that on your resume the next look is years of experience and I believe 3 yrs in min. Hope this helps.