Hi everyone,
I have just graduated University in Computer Forensics with a 21 and I am looking to increase my knowledge in a specific area. I hope in doing this I will have a better chance of getting a job… Does anybody know any skills or areas I should look into so I stand out from the crowd?
I have been told having in depth knowledge of the Windows registry is useful…
Thanks )
I would consider looking into memory(RAM) forensics. We have found its becoming more and more important for our work. Its also not a standard subject you get in most digital forensics courses, at least not in detail. Get Volatility and bulk extractor and start experimenting with memory dumps.
It's also a niche alot of employers are still hoping to fill. A little bit of knowledge in this may go a long way.
good luck
From my experience a lot of companies are looking for someone who is educated with forensics and incident response. Which overlap.
Not a specific area as such, but you'll do well to be able to demonstrate a solid generalist IT knowledge (you don't mention what your background is). If you're struggling to find paid CF work, go do some dogsbody general IT stuff to get some experience - it's more valuable than you might realise. If you want to differentiate yourself, prove that you know and love technology at interview. Mention that new PC you just built or that code you just wrote. Lots of employers love this kind of thing.
Not a specific area as such, but you'll do well to be able to demonstrate a solid generalist IT knowledge (you don't mention what your background is). If you're struggling to find paid CF work, go do some dogsbody general IT stuff to get some experience - it's more valuable than you might realise. If you want to differentiate yourself, prove that you know and love technology at interview. Mention that new PC you just built or that code you just wrote. Lots of employers love this kind of thing.
THIS. 100 times THIS!
I did a degree in Forensics and walked into a job straight after my degree without any real forensic experience, but I had nearly 10 years experience from various IT jobs ranging from tech support, to programming and working on large scale web servers spanning continents.
If your employer is worth their salt they will send you on any forensic courses needed. I spent nearly 6 months in Slough on an EnCase passport. That place will man you up in no time (I mean, Slough, not the course!) lol
Data recovery is something we have been introduced too whilst in university also. Using such tools as PC-3000 and Deepspar to recover data and diagnose hard drive issues. Obviously the tools are VERY expensive but having an in depth knowledge on these tools would benefit anyone no?
Thanks for responding guys )
I would defo put that down on your experience. I can't speak for everybody, but personally we have been chomping at the bits to get hold of DeepSpa and every time we tell the people higher up the food chain that it cost £4500 it gets knocked back, so we send out our HDDs to outside sources for recovery and they charge us up £1000 a go… do this several times and its OK. Ask for £4500 to do this yourself and Admin loses their minds! So don't expect all LE places to use it, if you do head in that direction.
I would also consider taking an expert witness course. Forensically sound evidence is well backed up by excellent skills when on the stand presenting your findings.
I have completed a Bond Solon expert witness course thanks to my university.
Thanks for the replies ! )
K2day, you sound like a University of Glamorgan / University of South Wales graduate. Am I right in thinking your project involved the use of the Forensic Research lab lol