Forensic Certification / Training Needs

[ddrecovery]

I have been involved in DR for a few years and want to expand my knowledge into Forensics. I would therefore like to take a Certified Computer Forensic Examiners course (or similar). There seems to be a lot of companies who offer the final exam (CCFE or similar) but not much in the way of training. I have read some people have not been happy with service from InfoSec/IACRB (don't know why). I am currently studying the 'File System Forensic Analysis' book by Brian Carrier.

Any other good publications/training companies I can look at?
Any advice you could give me would be much appreciated.

[HaQue]

Hi, Look at SANS http://www.sans.org/

[databack]

CCFP certification from SANS

[jdude45]

There is another textbook called "Forensic Computing: A Practitioner's Guide" by Tony Sammes and Brian Jenkinson. I just purchased this book mainly for its very detailed chapter on NTFS, but it is a decent companion to Carrier's book. Many of the forensics training and certs are product specific, i.e. Guidance Software, Cellebrite, etc. E.C. Council has a course and certification called the "Computer Hacking Forensic Investigator." http://www.eccouncil.org/certification/ ... vestigator

[ddrecovery]

Thank you guys. Your input is much appreciated

[DRUG]

Hi ddrecovery,

I've been studying for "FOR508:Advanced Digital Forensics and Incident Response" at SANS. It's awesome knowledge providing you know the basics of windows forensics and some hacking techniques that can prove useful along the way!

[ddrecovery]

Hi ddrecovery,

I've been studying for "FOR508:Advanced Digital Forensics and Incident Response" at SANS. It's awesome knowledge providing you know the basics of windows forensics and some hacking techniques that can prove useful along the way!

Thanks DRUG, I am thinking of FOR408 and FOR508. However its lots of money

[LostDataSa]

https://www.isfce.com/index.html

you can take online course if you want, but it will be very hard.

i took the online training but i didn't pass the test

[DRUG]

Hi ddrecovery,

I've been studying for "FOR508:Advanced Digital Forensics and Incident Response" at SANS. It's awesome knowledge providing you know the basics of windows forensics and some hacking techniques that can prove useful along the way!

Thanks DRUG, I am thinking of FOR408 and FOR508. However its lots of money

Well, it is indeed a lot of money, but INFOSEC/FORENSICS are expensive areas. Don't even bother to look at live classes, 3 days goes as high as 10k.