Hi, I am currently an IT Administrator with 10 years experience in IT, I have a degree in Networking and Computer Systems.
I have a keen interest in computer forensics, and a hunger to find data to prove someone’s wrong doing.
I want to learn more about this field; I have access to FTK 1.8 and Encase 6.18 but have not fully used their power.
I am confused what route to take to further my knowledge of the use of these tools and the area of digital forensics as a whole to help me progress my career.
Is it best for me to do a MSc or Training / Certifications in Encase / FTK?
As you already have a degree in a related field I would say do the training. If you're looking to use those tools take their courses, just remember that AD won't be training on FTK 1.8 anymore and EnCase v7 is soon to be released so their training will also change to reflect this.
If you're looking for training that is not tool-specific I'd recommend going down the SANS 408 route.
If you are looking to get your toes wet, Access Data's basic certification (ACE) is free and they have some good training videos that show you how to use some of their tools.
I completed an MSc in Forensics and Computer Security last year, and thoroughly enjoyed it. The assignments and dissertations gave me the opportunity to do some great research that complimented the knowledge already obtained from training courses and work experience.
DFICSI, snortymcsnort, smokum, thank you for your replies much appreciated.
Valid points about the new versions now available, do you think the SAN 408 will help fuel the interest I have in this domain, and lead me down a path to better myself?
The free ACE certification sounds good (anything free does) but this at least gives insight and a qualification I will defiantly take this on I think, I will check it out tonight to see what I need to do to prepare.
The MSc is hard work, I really want to do an MSc but the ROI is the hard part to justify at present for myself, maybe as suggested, get my toes wet with ACE, get some experience with the tools, then maybe a Masters?
If you do not mind me asking how have you started out? did you qualify yourself then look for jobs, or was it jobs that took you down the path to forensics?
I did a BSc, and walked into a job. Got mostly trained on Guidance courses.
Would you say EnCase is better to learn than FTK, or is it one of those things where it is best to learn both as one may be better for some tasks compared to the other?