±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 36212
New Yesterday: 2 Visitors: 118

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

EnCE certification

Computer forensics training and education issues. If you are looking for topic suggestions for your project, thesis or dissertation please post here rather than the general discussion forum.
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
Page 1, 2  Next 
  

arashiryu
Senior Member
 

EnCE certification

Post Posted: Mar 16, 06 19:17

I would like some opinions from the existing EnCEs out there.

What are your thoughts on preparing for the EnCE cert?

Use the new book - EnCase Computer Forensics--The Official EnCE : EnCase Certified Examiner Study Guide by Steve Bunting and William Wei (Paperback - Feb 20, 2006)

OR

Save my pennies to attend the boot camp / classroom training.

I already have a CCE. 2000+ hours of investigative experience with fortune 500 corps and some law enforcement cases under my belt. Overall 11 years of various IT experience.

I already have all the necessary hardware (ide/sata/scsi) write blockers and a purchased / pricey copy of EnCase ver 5.

I kinda have my mind half made up to give the book a try first but would welcome any opinions or thoughts from the existing EnCEs already in the field.
 
 
  

m7esec
Senior Member
 

Re: EnCE certification

Post Posted: Mar 17, 06 20:12

From what I have read from your posts, I would save the money and just get the book. I didn't have the option of the book at the time and just used my knowledge of Encase and their free study pamphlet they had. The EnCE is a good cert but technically not that difficult if you have past experience (except the practical takes some time)

Good luck and let me know if you have any other questions!
_________________
GSEC, GCFA, GCIH, EnCE
Certified Forensic Examiner
St. Louis, MO 
 
  

arashiryu
Senior Member
 

Re: EnCE certification

Post Posted: Mar 17, 06 21:23

m7esec,
Thx for the reply. After buying Encase, I really did not have the funds left over for for cost of class + travel + lodging.

The 3 CCE practicals I had to pass took a while so I was expecting EnCase to be lengthy and involved as well.

I'll let you know how I make out and ping you offline if I have any other questions. Thanks again.
 
 
  

gmarshall139
Senior Member
 

Re: EnCE certification

Post Posted: Mar 18, 06 06:24

Yes, get the book. I can't say from firsthand experience, but I've heard good things about it. Of course there is no substitute for training, so I'd get down to Sterling first chance you get. The practical portion of the EnCE will take some time. Plan ahead for that.
_________________
Greg Marshall, EnCE 
 
  

andy1500mac
Senior Member
 

Re: EnCE certification

Post Posted: Mar 19, 06 05:41

For what it’s worth, I'm 3/4 of the way through the book and finding it well put together.
From the perspective of someone like myself who has only had access to the demo software it has cleared up some of my questions. The first few chapters on hardware and A+ type stuff, as well as the file system data structures will be a review for some but the rest is a good read…up to now.

The different interface views or panes are covered in detail, as are the options available to each. The book includes a thorough explanation of how Encase stores the case and its use of CRC checks (on data blocks) as well as its MD5 hashing of the "image" as a whole. If you are/were slightly confused by the book marking functionality and how to use it properly, it is covered well and leads nicely into how they are a fundamental part in creating a structured and professional report.

Included is a DVD which I haven't really used up to now but has some evidence file samples to play with as well as a couple of PDF's and standard "flash cards and quizzes" for these types of books. This is what springs to mind but there is obviously much more…

Hope it helps.

Andrew-  
 
  

psu89
Senior Member
 

Re: EnCE certification

Post Posted: Mar 19, 06 08:07

WOW! That book looks very good. We are learning EnCase now and that would have made a great text book. I just might have to order it.

Thanks for the tip and the review.

Brian  
 
  

arashiryu
Senior Member
 

Re: EnCE certification

Post Posted: Mar 19, 06 10:49

Thanks to everyone for their input. I ordered it . Can't wait to read it and attempt the cert.  
 

Page 1 of 2
Page 1, 2  Next