Which Computer Forensic Certification is Right For Me?

Publish Date : 2021-01-25 12:21:10


Which Computer Forensic Certification is Right For Me?

There are a number of computer forensics certifications that one could choose to challenge including the Encase Certified Examiner (EnCE), AccessData Certified Examiner (ACE), Certified Computer Examiner (CCE), GIAC Certified Forensics Analyst (GCFA) and Certified Computer Forensic Examiner (CFCE) to name a few.

How then, does one choose the appropriate certification to pursue? While all of the certifications listed above are valuable, I would recommend pursuing one that includes a practical examination and one in which you can use the tools with which you are most familiar. As an example, it is going to be difficult for you to pass the ACE if the only forensic utility that you've used is EnCase Enterprise.

If you are trying to obtain a certification in order to break into the computer forensics field, I'd recommend searching the job boards for computer forensics positions to see the utilities that they are most often listing as required skills. About.com provides a good overview of most of the computer forensics certifications so I'm not going to go into the nitty gritty of each certification. If you are interested in reviewing their coverage, go to About.com and search for "computer forensic certifications."

Call me biased, but I am personally a fan of the EnCE certification. EnCase is a standard of the industry and found in most, if not all, computer forensics shops. So having the EnCE certification demonstrates to employers that you have mastered the tools that they use in their forensic labs.

In addition, passing the EnCE practical was a major confidence booster for me and I have used many of the techniques that I learned as a result of the EnCE practical during my "real" analysis.

In summary, in order to determine the proper computer forensics certification I would look at the following:

Certifications that require a practical.
Certifications that demonstrate mastery of an industry-standard tool or utility.
Certifications that you see in job listings.
Certifications that allow or require you to use a forensics utility with which you already have experience.

The EnCase Certified Examiner (EnCE) examination is a two part examination that consists of a written portion and a practical. The practical is difficult, but it tests the basic computer forensic skills that an examiner must have. The Forensic Secrets eBook is a concise guide to passing the EnCE practical. It is by no means a brain dump of the examination but rather a compilation of the techniques that are necessary to pass the practical portion of the exam.

https://my.westminster.edu/ics/Campus_Life/Campus_Groups/Tiny_Housing_Project/Discussion.jnz?portlet=Forums&screen=PostView&screenType=change&id=609310e6-7015-48fd-b586-a493f1881f84

https://my.westminster.edu/ics/Campus_Life/Campus_Groups/Tiny_Housing_Project/Discussion.jnz?portlet=Forums&screen=PostView&screenType=change&id=af78b369-765c-486f-97ad-6ec1b1bffa46

https://my.westminster.edu/ics/Campus_Life/Campus_Groups/Tiny_Housing_Project/Discussion.jnz?portlet=Forums&screen=PostView&screenType=change&id=04d0b5b8-998f-44bd-826d-3f69ca93ca84

https://my.westminster.edu/ics/Campus_Life/Campus_Groups/Tiny_Housing_Project/Discussion.jnz?portlet=Forums&screen=PostView&screenType=change&id=7f65d370-689d-4ad3-aff9-c63d1d842fc2

There are a number of computer forensics certifications that one could choose to challenge including the Encase Certified Examiner (EnCE), AccessData Certified Examiner (ACE), Certified Computer Examiner (CCE), GIAC Certified Forensics Analyst (GCFA) and Certified Computer Forensic Examiner (CFCE) to name a few.

How then, does one choose the appropriate certification to pursue? While all of the certifications listed above are valuable, I would recommend pursuing one that includes a practical examination and one in which you can use the tools with which you are most familiar. As an example, it is going to be difficult for you to pass the ACE if the only forensic utility that you've used is EnCase Enterprise.

If you are trying to obtain a certification in order to break into the computer forensics field, I'd recommend searching the job boards for computer forensics positions to see the utilities that they are most often listing as required skills. About.com provides a good overview of most of the computer forensics certifications so I'm not going to go into the nitty gritty of each certification. If you are interested in reviewing their coverage, go to About.com and search for "computer forensic certifications."

Call me biased, but I am personally a fan of the EnCE certification. EnCase is a standard of the industry and found in most, if not all, computer forensics shops. So having the EnCE certification demonstrates to employers that you have mastered the tools that they use in their forensic labs.

In addition, passing the EnCE practical was a major confidence booster for me and I have used many of the techniques that I learned as a result of the EnCE practical during my "real" analysis.

In summary, in order to determine the proper computer forensics certification I would look at the following:

Certifications that require a practical.
Certifications that demonstrate mastery of an industry-standard tool or utility.
Certifications that you see in job listings.
Certifications that allow or require you to use a forensics utility with which you already have experience.

The EnCase Certified Examiner (EnCE) examination is a two part examination that consists of a written portion and a practical. The practical is difficult, but it tests the basic computer forensic skills that an examiner must have. The Forensic Secrets eBook is a concise guide to passing the EnCE practical. It is by no means a brain dump of the examination but rather a compilation of the techniques that are necessary to pass the practical portion of the exam.



Category : news

Does all-German Champions League final spell trouble for the Bundesliga? wavering

Does all-German Champions League final spell trouble for the Bundesliga? wavering

- Most fans would agree that a great football league needs some key ingredients: skilful players, exci


Pass Huawei H13-623 Exam Questions In First Attempt

Pass Huawei H13-623 Exam Questions In First Attempt

- CertsLeads enables you to prepare your certification exams, Get most actual and updated exam questions PDF for passing the certifications exam in first attempt


Ex-News of the World legal chief arrested in phone hacking probe outshouting

Ex-News of the World legal chief arrested in phone hacking probe outshouting

- The former top lawyer for the now-shuttered News of the World newspaper, Tom Crone, was arrested Thu


70-573: Microsoft SharePoint 2010, Application Development Certification Details

70-573: Microsoft SharePoint 2010, Application Development Certification Details

- Exam 70-573 is one of the hottest certification courses that are offered from Microsoft