±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 1 Overall: 35880
New Yesterday: 7 Visitors: 126

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

XWays Forensics

Computer forensics discussion. Please ensure that your post is not better suited to one of the forums below (if it is, please post it there instead!)
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
Page Previous  1, 2, 3, 4, 5  Next 
  

MrWh1t3
Member
 

Re: XWays Forensics

Post Posted: Aug 08, 10 15:58

- jamie
In fairness I don't think it's that odd and I suspect MrWh1t3 wouldn't disagree with your follow up comments, Paul. I think he's just saying if you're trying to get an interview at an Encase shop and you can show prior experience with that tool then it's a point in your favour (not a shoo-in).

Jamie


Jamie is right. I agree about those as follow-up questions.

A lot of organizations have key word searches to screen applicants prior to moving the resume forward to the hiring manager. If they didn't have any of those key words they wouldn't make it to the portion of the interview you're talking about

When I worked for Booz Allen Hamilton we got something around 500-1,000+ resumes for certain positions. There is no logical way to weed those out unless you use key word searches. We used key words like, "CISSP", "Masters", "Top Secret", "Clearance", "Firewall", "CNA", etc. One can logically assume FTK and Encase are going to be two key words

SO...if you're going to pick between FTK, Encase and X-Ways "for interview purposes only", go with FTK or Encase. If you want a solid tool at a great price, go with X-ways.  
 
  

PaulSanderson
Senior Member
 

Re: XWays Forensics

Post Posted: Aug 08, 10 16:15

When I worked for Booz Allen Hamilton we got something around 500-1,000+ resumes for certain positions.


Obviously I work in a different world and I have never seen any CF positions where there are 500+ applicants for a position.

When I last worked in a management role where we got 100+ CV's then a quick read through of the summary and quals was enough to weed to a reasonable number. But that is a different issue.

I have the $3,500 - $4,000 for EnCase or FTK, but it seems crazy to buy until I get a job.


If a company was screening based on keyword searches then I prob wouldn’t want to work for them anyway Smile but if you feel that spending $3.5-$4K on an encase licence in prep for an interview is a good idea go for it. Once you have a job of course then you shouldn’t need to buy your own software anyway.

Just offering my opinion, as an interviewer, that it wouldn’t impress me.
_________________
Paul Sanderson
SQLite Forensics Book
www.amazon.com/SQLite-...entries*=0

Forensic Toolkit for SQLite
sandersonforensics.com...for-SQLite 
 
  

jamie
Site Admin
 

Re: XWays Forensics

Post Posted: Aug 08, 10 16:24

- sandy771
Just offering my opinion, as an interviewer, that it wouldn’t impress me.


Nor should it and I think that's because we're discussing two different things - skillset (i.e. familiarity with Encase) and understanding of forensic issues. Presumably it's not unreasonable to expect an interviewer to be looking for both (and more likely to be impressed by the latter).  
 
  

PaulSanderson
Senior Member
 

Re: XWays Forensics

Post Posted: Aug 08, 10 16:30

Actually I was discussing the merits of spending $4K on a licence for encase in prep for an interview.
_________________
Paul Sanderson
SQLite Forensics Book
www.amazon.com/SQLite-...entries*=0

Forensic Toolkit for SQLite
sandersonforensics.com...for-SQLite 
 
  

jamie
Site Admin
 

Re: XWays Forensics

Post Posted: Aug 08, 10 16:45

Fair enough, and I'd agree there are probably better ways to prepare and/or spend that kind of sum pre-interview.  
 
  

jaclaz
Senior Member
 

Re: XWays Forensics

Post Posted: Aug 08, 10 17:20

- sandy771


If a company was screening based on keyword searches then I prob wouldn’t want to work for them anyway Smile ...


Right! Smile

- Groucho Marx

I don't care to belong to any club that will have me as a member


Seriously, if applications are sorted by keyword searches, the Company has a problem and you can always write "I have not a long experience with Encase" that will be picked up as well. Wink

Conversely, I personally wouldn't employ an unoccupied that just spent 3÷4 K US$ in order to impress me, as - in my view - he would probably have some mental problems.... Rolling Eyes

If you are going to build your own freelance profession, it's allright, but buying a license for a program that will later be given to you by your employer seems to me like wasted money.

jaclaz  
 
  

chad131
Senior Member
 

Re: XWays Forensics

Post Posted: Aug 08, 10 19:26

Can't you find access to a dongle to prep without spending your own $$$? Lab time @ a college/university, borrow one over a weekend, apply for an EnCE and use the certification version, or have someone forward a dongle to you using USB over Ethernet?  
 

Page 3 of 5
Page Previous  1, 2, 3, 4, 5  Next