Just a quick follow up to Andy's earlier comment:
One thing that did bother me initially is that ethically there is the question of whether posts on this, or any forensic bbs could be exploited by an offender to learn techniques for covering up their tracks and perverting the course of justice.
A very fair point and certainly something I considered too. Some may remember that in a previous incarnation of these forums we had a forum for investigators only. It was hardly ever used and the burden was always on Forensic Focus to vet the membership…tough to do given fairly limited resources (including time). With that in mind I decided to get rid of that forum entirely when we upgraded the forums and rely on our members' common sense as far as the disclosure of potentially sensitive information is concerned. In addition, as Andy states, most forensic/anti-forensic techniques are well documented elsewhere.
At the end of the day I think the benefits outweigh the risks but, of course, nothing is ever certain. If anyone is keen to have an investigators only forum again then by all means let me know.
Cheers,
Jamie
I agree with everything said about Cranfield. Anybody in the UK wanting to do Forensic Computing should do at least the three initial courses. Extremely hardwork but worthwhile. I also use Encase as my major tool but also like to corroborate results by using other methods like FTK. For UK based Examiners I would also recommend a series of three courses run by 7safe (Dan Haagman) These deal with (and you get three professional qualifications) with Forensic Networks Security in the main hacking and the effects it has on a computer, registry files and traces that trojans leave behind etc and for someone trying to prove or disprove a Trojan defence to a charge of downloading Child Abuse images they are quite honestly the most worthwhile courses I have ever been on. You also get a good grounding into the use of creating virtual networks (VMWare is used) which is quite handy now with the Emulated drive addition in Encase 4.18 (PS I am not employed by any of the above mentioned organisations I just believe in giving credit where credit is due) 😀
Mark
Thanks for the email, i have seen the 7safe website before but did not know how good there where. I was looking into the CCE and / or the CHFI course….
Do you have a contact at 7safe i could email for details as i would like to try and "discuss" a price as this would be self funded, in the hope to get me the basic qualifications needed for a junior Forensic position.