Information required- Help

Unfortunately you need a lot more than a question to a forum to become and expert.

Start with your local college and build up sound computer knowledge of operating systems, file systems, file structures, and ideally some programming, thinking in Hex and maybe some data recovery. Then start looking at forensics.

Hi,

I remembered when I started to work in forensic field. My boss gave me the steve bunting's book on EnCase v6 "The Official EnCE EnCase Certified Examiner Study Guide ". I spent one week to read it and played with the v6. After that I practised under the control of experienced colleagues

There are numerous forensic tools EnCase, FTK, X-Ways, TSK, UFED, XRY………………………..

BTW your question is too large … what is your level? … what is your plan? will you work with some experienced people? ediscovery? LE?

The knowledge is in the books, so you can start here!

Regards

Many thanks

I am new to digital forensic, please tell me from where to start … [/quot]

I think you got that wrong. We can't tell you from where to start – only you know that, as that's where you are. We may tell you where to go. But we have no idea what competence you have in IT and computers, which is the base area of study. And you do need a solid grasp of that.

I'd suggest the book 'Forensic Computing' by Sammes and Jenkinson as a possible starting place.