Getting started on Computer Forensics...

[Baah]

Hello,

I'm trying to diverge into the computer forensics field and would like some tips on what are the essential things one should possess to develop a career in this field. While most of my work has been extensively on application architecting and consulting, I have also helped my organisation in conducting limited pen tests as well as discovering/eliminating bots& keyloggers within our intranet. Any help would be greatly appreciated.

 

[shemcomputers]

I don't know much about the computer forensics field...but I would assume that Computer Security is the way to go. And a CISSP (Certified Information Systems Security Specialist) certification probably is the best certification to obtain for that field. See here for more info:

https://www.isc2.org/cgi/content.cgi?category=19

 

[Jon19101]

software such as EnCase is a usefull tool with this one as is safeback, vogon, ilook plus others.

http://www.techcrime.com,

http://www.forensicsweb.com

may also help

 

[Baah]

Thanks for the tips friends. Will try out your suggestions.

 

[StellaIndigo]

Baah

You'll really need to get on a Computer Forensics course. The course should cover collecting evidence, using software, like EnCase, and the legal aspects of forensics. Unfortunatly the end users and even the criminal have some rights which can't be ignored. (

There are 10 types of people in the world. Those that understand binary and those that don't.

 

[wybnormal]

THere is no need to buy something EnCase to start with. Get a few CDRs and find the following to burn

Knoppix STD
Penguin Knoppix
SleuthKit

Over at Blackhat.com, they have their presentations on audio. Find last summers on Linux Forensics and listen to it. There should be a power point package with it, if not, let me know and I can forward you the package.

Read up on using DD to make forensic copies of the disk, how to examine equipment, how to keep a chain of evidence intact etc.

The classes are good but expensive so learn as much as you can before plunking down the cash.

MikeS


Find me at

http://www.packetattack.com

"Take advantage of the enemy's unreadiness, make your way by unexpected routes, and attack unguarded spots."
Sun Tzu