Posted: Sat Aug 17, 2013 3:57 am Post subject: Want to get my degree in CF I have over 13 years in IT
I am at the top end of my position I have over 13 years in IT, started as helpdesk, worked up to network admin, doing escalation support for a underperforming application, where I will not advance any further.
I thought getting my BS in CF and see if I can make the transition into CF.
That being said, I am a practical guy and would like to get hands on with applications and some sample images to explore the ins and outs of required applications and tools used.
Commercial Digital Forensic packages are expensive, no two ways about it, so you will not really be able to get experience with those tools. For the money X-Ways Forensics is a great tool, so if you have the money to spend try that, however if you are not making money it is tough to justify. That said, learning forensics is really about the process and many of the open source tools are great tools and are a great way to learn what the tools are doing.
I would recommend getting your hands on The Sleuth Kit/Autopsy. The new version is Windows only, so if you are a Linux guy you will have to use the older version. If you do Linux it is in many of the distros or check out CERT Forensic Tools.
There are many Linux live environments like SANS SIFT, CAINE, F.I.R.E., DEFT, Lnx4n6, and any number of specialized tools.
Almost every examiner I know has a copy of Carrier's File System book and at least one of Harlan Carvey's Windows Forensic Analysis books. Syngress publishes quite a few forensic authors so that is a good site to peruse.
And Google is your friend. Try topics like "open source forensics" or "digital forensics" and you will have more hits (and relevant hits) than you can read in a lifetime.
Also there is a completely different branch loosely called network forensics that with your background you may find interesting. Check out the Backtrack distro.
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum