There is certainly an issue of uptake. More cert holders gives a wider exposure, which in turn improves the value of the cert which gets more people using FTK and undertaking their training. Of course, EnCE is just as bad when it comes to overmarketting. Lately Guidance and AD have been drinking the same coolaid. Those press releases earlier this year about being court validated are a typical example.
I think it is a basic grab for money and to expand their certification program. With their requirement that you take one of THEIR classes for recert, they are basically charging you $2500. I have three certifications and none of them cost me that, and the recert requirements for training are not vendor specific.
I have several friends who stated they will not renew their ACE because of the new requirements.
Donven,
I took the ACE test last night and passed it with a score of 91%. Some people I talked to thought it was hard. I thought it was fairly easy. I went to Access Data's web site watched their ACE webinars and downloaded the ACE Prep questions. I answered all the questions and then took my chances on the test. The test is 37 questions. 30 of them deal with Access Data products, so if you know the products or have them available when you take the test the questions are not that hard. The last 7 questions are practical based off the image you download. Those questions are really straight forward. The first time you certify it is valid for 1 year. In order to re-cert you need to take two Access data classes. I hope this helps you.
Ray
ACE
Thanks for sharing your experience. I'm really grateful.
regards
Ed
ACE wannabe. 😉
Hi Donven!
I am second to rayp, i gave it 2 days before and passed it with a score of 97.3%. Exam was easy and straight forward. Just watch videos, practice on tools and do solve study guide on Accessdata website. Practical questions were quite simple too.
The first time you certify it is valid for 1 year. In order to re-cert you need to take ONE Accessdata training course.
I hope it would help you,
Thank you,
Talha Habib
Associate of ISC2, ACE, ITIL
Ya, I should have been a good forum watcher and let everyone know that i passed with a 90.
Ya, the videos are slow and Drain Braining lol
But allowed me to pass the test.
Since then I was able to obtain my
CPE - Certified ProDiscovery Examiner
and presently persuing my CCE *HOPES*
Anyone who wants to get into Computer Forensic I would highly recommend checking out the ACE. It gets you some basic understanding of computer investigation and analysis.
Thanks for the Reply!
-Donven
Access Data's testing process is much simpler than when it was first offerred. It does appear to have been dumbed down a little.
The cert is highly suggested if you are going to testify to using the tools FTK offers.
I will admit, I think Access Data has brought FTK a long way (even though it's been a little bumpy) in the last 3 years, and is great too to have in the lab…
_Imagine_ if General Motors offered a certification for its vehicles … as operators of their vehicles would people be forced/coerced into obtaining the GM certificate of operation? Because you know … you must be certified to operate a GM vehicle … otherwise you must be a halfwit! Hmm …
Holding a certificate that you can interact with a GUI offers little in the way of indicating your level/degree of knowledge and understanding of most aspects of data forensics.
Don't believe the hype that you _must_ be certified to use any application you use. Where did the Wright Brothers get their aviation degree?
Look back 10 years and see there were no certifications for forensic applications. Oddly enough - practitioners were using those same applications for civil and criminal case work. Hmm … Where were those certs then? Why didn't the software vendor offer a cert when version 1 was released?
Strive to be more than a tool monkey. Relish in the opportunity to educate counsel (and others) that it has been shown any number of times in the scientific community that even chimpanzees can point and click their way to utopia … but it doesn't make them a forensic practitioner … only a tool monkey.
)
Cheers!
farmerdude
Strive to be more than a tool monkey. Relish in the opportunity to educate counsel (and others) that it has been shown any number of times in the scientific community that even chimpanzees can point and click their way to utopia … but it doesn't make them a forensic practitioner … only a tool monkey.
WOW farmerdude
That "sounds" like you really just crapped all over the certs lol
And maybe I'm just reading it wrong.
I would imagine you just were saying just because someone has a cert doesn't make them a professional examiner.
Agreed!
You could argue the same thing with a degree. It's just a piece of paper but people like to see it. It shows a sense of accomplishment.
Getting certs are a great place to start for people who have little exp. or no guidance in computer forensics at all.
Not everyone has 1,195$ for some pristine training as you offer wink
Which would probably be way over a lot of new comers heads.
It's all about baby steps
See Certs not as a "tool monkey" but small personal goals that can lead to larger and more intensive training.
Have a good one!
Hi Donven,
Nah, no visit to the certification outhouse in my previous post. 😉
Reread my previous post. There are some nuggets there. Promise. )
To potentially help clarify …
1) Believing in and earning a certificate without A) understanding that certificate and B) understanding the implications of holding that certificate is not only dangerous but also ignorant.
2) Most product certifications are focused on the product, not the process nor the analysis. Saying you're certified on a product is really saying what? A smart vendor will state that holding a certificate for their product means that the holder has demonstrated an acceptable level of proficiency with their application. A _dangerous_ (in my opinion) marketing campaign may state … "… certification acknowledges that professionals have mastered computer investigation methodology as well as the use of [PRODUCT] during complex computer examinations." Wow. Really? "Mastered". I haven't taken that certification, but I can't imagine it fully tests the applicant to see if they've "mastered computer investigation methodology". Seems like a very thorough testing process.
3) I'm not certain I agree with "Getting certs are a great place to start for people who have little exp. or no guidance in computer forensics at all." I mean, if we take that statement literally, what is the real value in a certificate _if_ someone who has little to zero experience can earn it? Excuse me, I'm Joe Blow and while I have no experience in forensics I have certificates A and B … hire me. ) If one can attain a certificate in a demanding technical profession without any experience and little guidance, then that certificate really ought to be examined. Which brings me to my next point.
4) A product neutral certificate, one that tests knowledge, analysis, and reporting, may mean more. You're no longer merely testing the applicant's ability to interact with a GUI, but you are focusing on fundamentals, principles, skills, and articulation.
Don't misinterpret. (If possible ) ) Some certifications are excellent. RHCE and CCIE come to mind. But too many folks looking to get into forensics seem (based upon numerous postings on numerous forums) to seek GUI certs out as a ticket to a career. And feedback is always varied, so determining if a cert has value or not is left to the seeker, not the holder or non-holders. However, understand that holding that certificate says something about you. That something may be good or bad. You have to figure that out.
Anyone _ever_ question if they would (almost) be embarrassed to have a GUI certificate. As in "Did I really need to pay to take an exam (and pay for training classes in order to retain my cert … money money money … motivation … hmm … perceived value vs. real value … ) to show competency in a point-and-click tool? I mean, test me to show you I can navigate the menus, sub-menus, execute your scripts, ETC." Hmm …
Cheers!
farmerdude
Farmer dude I totally understand where you are coming from and agree with what you are saying! ) HORRAY!
Yah, I would hope that anyone obtaining an ACE wouldn't just run out and be like "Alright lets go catch some bad guys" so they can get sanctioned !HAHAHA!. lol
It assisted me by providing some tools that I can use to achieve what I would consider a good foundation of actual step by step process of collection, preservation, analysis, and production of evidence.
Good job Farmer Dude )
Let the trolling begain j/k lol