I've almost finished a course at Uni on computers and have joined this forum to get some starter ideas of where to begin with computer forensics.Many of the websites that i've visited, have/are very helpful but lack core information on how to examine computers from the "coal face" or step by step.I have registered my interest with the only CCE trainer/certifier here in OZ and would like to get a heads-up before the course eventuates before mid year.Any ideas of text books/open learning websites would be greatly appreciated.Best wishes,EyeSpy.
I would suggest trying to pick up some work with someone already in the field. Ring them up and tell them you are looking for a few weeks of unpaid work experience.
Also, there is other forensics training going on in Australia. We'll probably be running a course ourselves later in the year, unlikely to be in Darwin however.
Many thanks for your reply Passmark,i'll take your advice onboard after i get this Uni course out of the way.I haven't heard of anyone else here in Oz that does computer forensic training,other than the company(and Uni's) in Canberra and i have vigourously chased this up but i will be eager to hear about the course you have on offer later in the year.Travelling is not an issue this end,i have to keep reminding myself that remote Oz doesn't have much to offer at the best of times.
Dimension Data used to run the EnCase training in Australia (not sure if they still do). Fulcrum Management also run FTK and X-Ways training. Realise these are all vendor-specific, but its a good place to start.
From my knowledge its not just uni's in Canberra that do forensics based courses. Deakin in Geelong were looking into getting something going when I was just finishing uni (about 2005) and I know Edith Cowan in Perth have a large forensics curriculum (and conference).
I think you'll find there is much more happening in Australia now than you think…
No doubt there is,just not here in Darwin.I have heard that Perth offers some good courses,i'll look into that at a later date but i'm really hoping to get the basics externally,Uni prices(hecs) aren't all that competitive with external courses,just have to pay upfront with external courses.I've got a few old computers here with XP for the OS so i plan to use them as the guinea pig for my studies, using open learning resources to keep the costs to a minimum,even something as a spring board to get me started.Many thanks for your imput,greatly appreciated.
I don't know if this would be helpful to you, but I wrote up a report based on my analysis of one of the images/scenarios available online. I posted that report to the Win4n6 Yahoo group, and I think it does provide some insight into how I went about performing an end-to-end examination.
HTH
Great,many thanks,i'll check it out in the morning,cheers.