Notifications
Clear all

CHFI course

3 Posts
2 Users
0 Likes
494 Views
(@dizy_0dk)
Posts: 5
Active Member
Topic starter
 

Hi Everyone,

I am doing CHFI course as a top up for my degree and have bought a CHFI book to prepare for the exam. Just wonder if there are further advice, such as reading or mock test. Thank you

 
Posted : 23/08/2016 7:51 pm
tracedf
(@tracedf)
Posts: 169
Estimable Member
 

I haven't taken the CHFI, but I do have other forensics and security certs. My advice

If you have time, read at least 1-2 other books before the cert guide. This will give you a better background in forensics before you start focusing on the test. If you're in a hurry, focus on the cert guide and go to outside sources when you don't understand something or are interested in a particular topic.

As you read, try out as many tools as you can. Most forensics books mention a bunch. Use EnCase Imager and FTK Imager to image a drive. Try out a couple of MFT parsers after you learn about NTFS. Play with the Sysinternals suite. Download a free forensics suite such as Autopsy. Run OSForensics on your own PC and see what you can find. Download a demo of Mobilyze or Mobiledit and run it on your own Android or iOS device.

If you need help picking some books, I recommend Incident Response and Computer Forensics (3rd), and Windows Forensic Analysis Toolkit.

 
Posted : 24/08/2016 4:23 am
(@dizy_0dk)
Posts: 5
Active Member
Topic starter
 

Thank you for the useful info.

 
Posted : 24/08/2016 12:11 pm
Share: