Hi all,
I have been trying to figure out an inexpensive route into the computer forensics field. I currently hold a MSM in Information Systems Security, and a BT in Network Administration, and I have roughly 9 years experience in IT and ~2 years as a security analyst. I am currently work as a sys admin; however, I have been wanting to get training and/or certified in computer forensics, due to several employers requesting information security professionals to have either experience or training in forensics (even if the job does not entail it).
I am also certified as an incident handler and hold two other security certifications that deal with the technical side of security (my graduate degree is on the management/administration side). Despite all this education and training, this is one area that I have none in, and it is holding me back from advancing my career. I have done some research on where to start (including reading postings here) and I am still at a lost as what direction to take and where to go.
So here are my questions
1. What is the most recommended entry level forensic certification?
2. Is it worth taking online college courses in computer forensics online?
3. Are there any courses (boot camps) or some other educational method you would recommend?
4. What other options that you recommend?
I have been eyeing the CCE as a good place to start, but I don't have any training or experience to meet its requirements to take the certification, and a lot of the training courses are cost prohibitive. I would like to get a decent understanding in this subject matter, as I am sure it is very beneficial in the long run.
P.S. - I live in the US and I am only looking for options within my country, since I can get my employer to reimburse $600~$725 towards the training. Also, thank you in advance for your help.
Greetings,
I met the CCE requirements with 15 years of IT experience, a CISSP, and several years of internal incident response that included forensics of possibly compromised systems. I took the CCE Bootcamp and found it helpful and not too expensive. However, you could get the same education on your own if you're sufficiently motivated.
Have you looked at SANS On Demand classes?
Perhaps you could find a mentor? Many of us could guide someone else through a course of study.
And there's an interesting research topic for someone in school - is there some value in developing an "open source" course of study designed to be administered by a mentor rather than an institution?
-David
So here are my questions
1. What is the most recommended entry level forensic certification?
2. Is it worth taking online college courses in computer forensics online?
3. Are there any courses (boot camps) or some other educational method you would recommend?
4. What other options that you recommend?
A solid entry-level digital forensic certification is the Certified Computer Examiner (CCE). I have gone through the on-line bootcamp offered through Champlain College in conjunction with the International Society of Forensic Computer Examiners (ISFCE) and will be taking the examination in December.
College courses specifically geared towards digital forensics affords you both an academic credential and credit hours, usually a certificate upon completion of a certain sequence of courses, and can be a good foundation for other forensic training. Courses are offered at the undergraduate and graduate levels depending upon the college. I completed the Computer Forensics & Digital Investigations Certificate via on-line studies through Champlain College and am considering the Graduate Certificate in Computer Forensics from the University of Central Florida.
/Grerg
If you are really short of dough you might want to look at Challenging the GCFA from SANS. This would be a difficult route. Grayson Lenick describes how he did it in his blog.
Google search for Eye on Forensics It can be done! and the articles
Studying for the GCFA certification Part 2 Studying for the GCFA certification Part 1