Hi Everyone,
I am doing CHFI course as a top up for my degree and have bought a CHFI book to prepare for the exam. Just wonder if there are further advice, such as reading or mock test. Thank you
I haven't taken the CHFI, but I do have other forensics and security certs. My advice
If you have time, read at least 1-2 other books before the cert guide. This will give you a better background in forensics before you start focusing on the test. If you're in a hurry, focus on the cert guide and go to outside sources when you don't understand something or are interested in a particular topic.
As you read, try out as many tools as you can. Most forensics books mention a bunch. Use EnCase Imager and FTK Imager to image a drive. Try out a couple of MFT parsers after you learn about NTFS. Play with the Sysinternals suite. Download a free forensics suite such as Autopsy. Run OSForensics on your own PC and see what you can find. Download a demo of Mobilyze or Mobiledit and run it on your own Android or iOS device.
If you need help picking some books, I recommend Incident Response and Computer Forensics (3rd), and Windows Forensic Analysis Toolkit.
Thank you for the useful info.