Join Us!

Notifications
Clear all

EnCE Training  

Page 1 / 2
  RSS
bh47100
(@bh47100)
New Member

Hello,

Just wondering if there is anyone holding a EnCE (Encase Certified Examiner) certification. I am looking into becoming certified and would like to know if it is a worthwhile certification and also if the Version 4 software is worth the $2700.

Thanks in advance,

Brandon

Quote
Posted : 19/08/2004 7:56 pm
Andy
 Andy
(@andy)
Active Member

Hey there, looks like we are the first to post. I hope your forum takes off 🙂

EnCase - worth the money? Depends on what you need it for. If running a forensic computing business or law enforcement agency the yes - its probably the best tool. There are others such as FTK and Smart (Linux) but EnCase seems to have more support. It does the job quick and has a simple easy to understand interface (but perhaps that just because I'm very used to it).

If I was freelancing and could not afford the $2.5K licence - I'd probably use Linux.

EnCE - is it a good qualification? I'd say yes, but not essential.

ReplyQuote
Posted : 19/08/2004 9:45 pm
Jamie
(@jamie)
Community Legend

Welcome both to Forensic Focus (and thanks for kickstarting the forums!)

I think I share Andy's take on EnCase and the related certification. Just one question though Andy, if you don't mind me asking, do you already have the EnCE? If not, is it on the cards?

Cheers,

Jamie

ReplyQuote
Posted : 20/08/2004 1:49 am
bh47100
(@bh47100)
New Member

Thanks for the insight. (both of you) I am graduating next month with a CIS degree and want to specialize in a computer forensic area. My Masters classes start soon for my MISM and I will focus on security related topics. I am spending my time now determining which certifications, publications, web sites, training facilities, software and other venues have rewarding information and respected products and services. This field is a little behind the scenes but growing rapidly in the private sector. I would really like to get involved. I am familiar with Hex Editors, basic file reconstruction and software data recovery. I asked about EnCE just because the articles I have read regarding certifications in this arena have all mentioned EnCE and Certified Computer Examiner (CCE). I am also looking at training facilities and browsing for job opportunities in the field, but experience seems to be the key. Any advice or suggestions would be appreciated, and also info on how you guys got started or what field you are in may be helpful as well. Thanks again. Hope the site does well.

Brandon

ReplyQuote
Posted : 20/08/2004 7:01 pm
Jamie
(@jamie)
Community Legend

Yep, Guidance market well (that's not a criticism!)

Personally I got into this field as I had a background in network administration, a huge interest in computer forensics and a friend who knew someone working in the field with a vacancy in their team. The first two are easy, the last almost impossible to arrange…I just happened to be in the right place at the right time. Perhaps the lesson is that personal contacts (e.g. through forums, conferences, discussion lists, etc.) can make a difference.

You're right to say that experience is the key but it's often a chicken and egg situation. In the meantime, until you get your foot on the ladder, I recommend reading as much as possible and experimenting with whatever software/hardware you can. Training appears to be improving as far as the range of courses is concerned but it's slow progress. One further option may be to contact local law enforcement to see if you can assist on a voluntary basis, e.g.

http://www.oregonlive.com/news/argus/index.ssf?/base/news/1089149447234670.xml

No idea how widespread such schemes are but worth a shot if LE work appeals, I guess. Anyway, best of luck and good to have you around the forums.

Cheers,

Jamie

ReplyQuote
Posted : 20/08/2004 7:58 pm
Andy
 Andy
(@andy)
Active Member

I agree that the very best way to learn this business is practice - trial & error. For example if I want to investigate how a website had been hacked, I made my own site and learnt how to manage one (I had no experience web authoring/management prior to this).

Most people who venture into the field already have a good idea how computers work, some better at the technical side than others, but the most valuable skill is investigation and knowing how the legal system works, and that’s something often comes with experience. Which brings us onto the chicken & egg situation.

Andy

ReplyQuote
Posted : 21/08/2004 10:18 am
Jamie
(@jamie)
Community Legend

Thanks Andy, some valuable food for thought there. Appreciate the time taken to reply.

Cheers,

Jamie

ReplyQuote
Posted : 21/08/2004 12:55 pm
bh47100
(@bh47100)
New Member

Thanks to both of you for the good advice. After all the reading I have been doing I can see that Jamie is quite the source for information. I enjoyed many of your articles.

Andy, I had a question for you regarding Police work. The majority of the investigations in my area seem (as I have read) to be handled by our Bureau of Criminal Investigations. Is that the trend for most states or is it common for the local police department's to handle a forensic computer investigation.

I have decided to get my CCE this next year, and work from there. I am quite skilled as a programmer, but it is just not a subject of interest for me anymore. I am thinking I will travel this path and get certified with the CCE, EnCE, and GIAC Certified Forensic Analyst (GCFA). Then I will focus on finding a position within an organization, maybe a CSIRT job that has an entry level position open. The private sector seems to be the way in. I will also see, after I accomplish that, if there is a way to do some volunteer work for the local PD's or maybe the BCI will have something available by then. Until then I will play behind the scenes and absorb as much knowledge as I can from the net, books, and training. I know it's not as good as real world experience, but sometimes you have to just dig in to get in.

Best to you both,

Brandon

ReplyQuote
Posted : 22/08/2004 2:44 am
Andy
 Andy
(@andy)
Active Member

Not all who work in those police deparments are police officers, some are civilain support staff. So if I were you and wanted to get a start in computer forensic criminal investigation, i'd try making enquiries with your nearest law enforcement agency. They just might be looking for staff, and someone with a programming background might be what they are looking for.

ReplyQuote
Posted : 22/08/2004 9:38 am
hitechpi
(@hitechpi)
New Member

If you are going to stay in or enter the Computer Forensics field, expect to spend a few thousand dollars, and get as much training, hardware, and software you can afford. Master one of the leading forensics softwae programs, at least.

Check with your local police or sheriff's office and find out if they have a computer forensics unit. If not, you might find your skills could be needed there.

ReplyQuote
Posted : 24/08/2004 2:46 am
krishang
(@krishang)
New Member

Hi Andy

Need some advice from you. we want to provide training on forensic software Encase to our 4-5 persons for 2-3 weeks. Can you recommend someone who can take up this activity for us in New Delhi, India. Alternatively, our trainer with some background on forensics can be trained in UK/Europe/US which will enable him to further conduct the in-house course for our team

rgds
Krishan

ReplyQuote
Posted : 02/09/2004 11:06 am
gmarshall139
(@gmarshall139)
Active Member

Hi Andy

Need some advice from you. we want to provide training on forensic software Encase to our 4-5 persons for 2-3 weeks. Can you recommend someone who can take up this activity for us in New Delhi, India. Alternatively, our trainer with some background on forensics can be trained in UK/Europe/US which will enable him to further conduct the in-house course for our team

rgds
Krishan

pm sent

ReplyQuote
Posted : 18/09/2004 3:46 am
Andy
 Andy
(@andy)
Active Member

Hi Krishan,

Sorry I have take so long to reply, but I have been tied up with work commitments and not had chance to read the board.

I see Greg Marshall has pm'd you already.

I can tell you that Guidance Software have a number of courses available at their Liverpool training school - for your in house trainer (should he come over to the UK) to enrole on.

The courses at Liverpool are excellent and the facilities good too.

However; if you still require someone to come over to New Delhi and teach you how to use Encase on a one to one basis, although I am no longer an 'official' Guidance part time trainer - I would still be happy to help 😀

Regards

Andy

ReplyQuote
Posted : 29/09/2004 6:35 pm
krishang
(@krishang)
New Member

Hi Andy

pm sent

Rgds
Krishan

ReplyQuote
Posted : 01/10/2004 9:48 am
Andy
 Andy
(@andy)
Active Member

Can you pm it again krishang, I didn't get it in my inbox.

Andy

ReplyQuote
Posted : 01/10/2004 8:13 pm
Page 1 / 2
Share: