Hi,
I decided to try to start a new practice in CF after 25 years in software development/PC setup/networking, etc. I earned a CHFI certification and have been reinforcing knowledge with newly acquired hardware such as LogicCube MD5, Disk Jockey, Helix distro, etc.
I've been networking thru firms already in the business, as well as attorneys we know and local police departments but it seems like there should be a better way of making my services and availability better known….does anyone have any suggestions/ideas?
For example, are there publications specifically used by Lawyers/attorneys where it might be useful to run an ad?
Professional organizations to join?
Other ideas?
Many thanks in advance,
rktung
rtung@berylgroupinc.com
Hi,
If you use the Disk Jockey on a case, what do you validate with?
I haven't used the DJ as the primary capture tool on a case yet…since I have access to an MD5 I would use that first. The DJ is for backup, 'just in case'. I guess if I ran into that situation I would calculate MD5 on source drive, capture with DJ, then calculate MD5 on the target. Is there anything else you would recommend?
The DJ has other modes and uses also and that's why I got it….to copy/dupe master drives to working drives, and also to mount drives via USB, either write blocked or R/W.
I thought having a separate hardware device for some of these functions to offload normal PC would help, since some of the benchmarks for these tools are incredibly long, for example 4 days for FTK to analyze a 30GB drive with all the data carving options turned on, etc.
rktung
rtung@berylgroupinc.com
Hi Rk,
4 days to analyze a 30GB drive is pretty odd. Did you turn down the logging to 1 minute to see if there was a hang up somewhere?
I had a DD of a 12gig HDD take 20 hours once. The problem turned out to be two cylinders went bad. So everytime it each a sector in those cylinders the drive would read time-out three times before going to the next sector. I would suspect some type of hardware error. Or other processes on the PC occupying the processor. "Check your anti-virus and spyware programs" they can eat your lunch, also.
> 4 days to analyze a 30GB drive is pretty odd
I don't know…depends on what the customer was looking for. I had a 40GB drive take almost 3 days to analyze before b/c the customer kept telling me what the issue was, but there simply wasn't enough info to support their version. So, not only did I have to do all my analysis, but I had to completely and thoroughly document why their theory was incorrect. That can take time.
Everyone has had a small drive that has taken forever, it is still odd and there is something wrong there.
I would be interested to see the log.
As for starting a business, you need to check into you local state licensing reqirements. Some states have specific requirements for personnel that are involved with evidence to be present in court – aka PI License.
Another issue you will need to be careful with is the organizations that you join. Some have restrictions that you can/will not work for Defense councils, such as HTCIA.
If you have never carried a Shield then the LE community will be a hard nut to crack – wish you luck. Just keep pitching, might try some pro-bono seminar's (their facilities – very low cost to you [just your time].
Hopefully, your previous career left you with some favorable contacts. I would try to get them to drop your name here and there. Be careful, I've seen several persons apply to much pressure to friends and past work relationships and cause real professional damage.
Don't forget about Professional liability insurance, including Errors and Ommission Riders – shop around.
Keep pitching and trying different techniques. Might even try different clients, business, small corporations, etc…
I'm in the same boat! You will be surprised at what possibilities can arise when you expand your horizons. Hopefully, you don't need to support yourself with this career, initially. It takes time to build any business and establish clients.
Wish you the best and Good Luck!
"For example, are there publications specifically used by Lawyers/attorneys where it might be useful to run an ad?"
Here are a few ideas
- Contact your state bar association they normally have online and print advertising options
- Online ads with yellowpages.com, infospace.com, superpages.com
- Other sites..hgexperts.com expertpages.com
- Procureapro.com offers a lead service for computer forensics
- Law.com and technolawyer.com offer target ad opportunities for your geographic region
- Some cities have a daily publication for attorneys that list cases/rulings etc. and offer ad space
- Some TV stations will highlight new businesses
- Local business journals and newspapers will highlight businesses
It really comes down to your advertising budget and trying different avenues to see what works. You can start with a single ad and expand as you get business.
Hope this helps!
Jon
jon.rowe@pinpointlabs.com