Need help to start ...
 
Notifications
Clear all

Need help to start from scratch...

13 Posts
10 Users
0 Reactions
1,203 Views
ForensicRanger
(@forensicranger)
Estimable Member
Joined: 16 years ago
Posts: 122
 

You're right - everyone has to start somewhere. Are there departments with a Tech Crime section that you can go to and spend some time with? Spending time in a unit will get you the wanted results much quicker than self study (imho)..

IACIS was already mentioned - great point for you as that, from my understanding, involves a mentorship to help you out.
FLETC was mentioned, also great… so you have starting points.

In the mean time, keep practicing and start making calls to Departments )


   
ReplyQuote
(@farmerdude)
Estimable Member
Joined: 20 years ago
Posts: 242
 

You may wish to look into the Atlanta chapter of the HTCIA, atlhtcia.org . If you can attend a meeting or two for a topic relevant to what you're seeking to learn it might be worth your department's time.

Cheers!

farmerdude

www.onlineforensictraining.com

www.forensicbootcd.com


   
ReplyQuote
stigster
(@stigster)
Active Member
Joined: 19 years ago
Posts: 19
 

The HTCIA Conference in Atlanta kicks off this Monday and a lot me forensic people are going to be there (Me included. So excited! )

Anyway, ForensicRanger has a very good point. Who to call when you need assistance or quality control is important, but I agree that you can't let that stop you from getting started. And that is partly why I think SoPs and documentation is important. When you are working from a solid foundation, it is easier to get things right. Also, if you can get your SoPs "certified" and if you can document in all your cases that you follwed propper procedure, it's harder to attack you evidence. I'd say you still need someone to check your results, but everything just becomes easier and less resource consuming when you have a standard way of doing things.

Like ForensicRanger I have also heard great things about IACIS, but I don't know them directly. I might have a closer look later, but they are probably a good source to check out.

As for tools, I'd say can go far with open source tools as long as you make sure to properly verify your tools and how and why you do the tings you do and use the tools you use. DCFLDD or DC3DD are good imagers that can be used directly, or you can have a look at free a graphical user interface like Paladin (www.sumuri.com) or Helix 1.9. With a DD image you can work your case using just about any tool available - hexeditors, EnCase, FTK, TSK, etc. And as long as you ensure proper chain of custody procedures and to always work on a working copy and keep your original image intact I'd say you're off to a flying start.

-Stigster!


   
ReplyQuote
Page 2 / 2
Share: