Search results

  1. A

    Questions for a possible legal action

    Wow.. it's been awhile since I've been around. :lol: Do you have access to the computer that sent the document out to the printer? The spool file would be out timestamped somewhere that will tell you what printer it was sent to and when it was sent. Just where I would start looking anyway. As...
  2. A

    Red-Handed Bandit

    I concur. If you tamper with the evidence, you risk the defense putting up a number of questions about the authenticity of the video, etc. If you need to, purchase another DVR Unit, and let the police use the original unit as evidence. You should have a backup system anyway in case the DVR unit...
  3. A

    What does a CCE earn?

    Well...I am starting up my own firm here in a few months and I feel there is enough work out there for a number of people, but it depends on the area. I know of one other firm in this area and they do work outside this area as well. I am limiting myself to local work contacts. The good thing is...
  4. A

    Lost data while upgrading to Windows Vista

    I get this story alot from users. Too many things go wrong when just upgrading to a new Windows OS. My advice to anyone else considering the Vista upgrade is make a Ghost (or any other software) backup of your hard drive, wipe it and do a clean install. Ghost has a nice little explorer program...
  5. A

    Questions for CCE's in the Rockies and beyond

    In respect to this, the CCE is watched over by the current board, existing of veteran professionals from state and federal agencies. If a CCE examiner was not "up to par" with their work, they should be reported and the CCE board will most likely look into the matter. There are also people...
  6. A

    Questions for CCE's in the Rockies and beyond

    I must say something. The CCE is not the same certification as the EnCE or the ACE. Those certifications are vendor specific, training one and displaying the confidence in using their software. The CCE is non-vendor specific and trains and displays the competency in procedure and knowledge of...
  7. A

    Questions for CCE's in the Rockies and beyond

    I took my training/certification thru Kennesaw. That is the route I would go if you're doing the program online. I know a CCE in the Colorado area that is regular on the listserv, I'll mention this post and they can go from there. I know that Mr. Mellon actively monitors schools that try and...
  8. A

    Drivecrypt plus

    I had thought about this for awhile, but never really tried it. Would it be possible to download and install their management console software: Maybe you need to roll this out to unencrypted PCs first, but I was thinking about if you can add existing...
  9. A

    CP Question

    You can't be serious... :roll: Can I compare this to walking into a police station with a kilo of cocaine and asking the Desk Sargent to tell me where can I report this? The mere possession of CP is illegal. While they will be investigating your case, you will most likely be publicized by the...
  10. A

    Computer Forensics vs. Healthcare

    The field is NOT easy to get into. Anyone can take classes, but it's after the classes and finding a job that's the hard part. A law enforcement background in not a mandatory skill, but helpful as most are well trained on how to deal with the court system. One pursuing computer forensics will...
  11. A

    Computer Forensics vs. Healthcare

    Re: Computer Forensics vs. Helathcare <r><QUOTE author="rbcowman"><s> </e></QUOTE> We won't lie either. <E>:)</E> That range of pay for someone just starting out is very few and far between. Probably the most money you can expect starting out would be in the $36k-$52k range. With a 4-year...
  12. A

    Professional Cert vs BA

    In your original post, you did not mention you already had a B.S. degree. You might now consider certification such as the CCE and a vendor certification like EnCase or Forensic Toolkit. Most CF jobs are looking for a computer/technical 4-year degree and some sort of certification in forensics...
  13. A

    Professional Cert vs BA

    My opinion is professional certifications are really for people that wish to supplement their existing higher education. if you are starting from scratch, and it is the computer forensics field you want, then there are a few options. One is to go for the B.S. in Computer Forensics. A Bachelors...
  14. A

    Champlain College Break Down

    Re: BA or AA <r><QUOTE author="TheMan3276"><s> </e></QUOTE> I am on my last full semester and 1 partial semester, and I am done with the B.S. program.<br/> <br/> The work load depends on the instructor. Some realize that it is an online course and accommodates that everyone is active at...
  15. A

    Emails Intercepted

    I am not familiar how AOL, MySpace and Hi5 handle e-mail, but just at a glance, perhaps she added her e-mail address to your accounts (distribution lists, Blind Carbon Copy, etc.) so when you send/receive an e-mail, a copy of that e-mail is also sent to her account. It is highly unlikely a...
  16. A

    Which Degree?

    L.E. careers in computer forensics are great. I wish I could have gone that route myself, but you don't go from school to a CF job in a police dept. Most police depts. are "work your way up through the ranks" kind of jobs. You would probably begin as a patrolman and work your way up into the...
  17. A

    Reading, john Vacca-Computer Forensics, now what?

    I wasn't aware that computer forensics was considered a "hobby". To me, that is like saying being a physician is a "hobby". I don't mean to seem harsh, but many of us take this science field very seriously. People that want to do computer forensics because they "know a little about computers"...
  18. A

    .lnk meant to be text help! plz *-*

    The act of formatting a hard drive or deleting a file does not remove data. However, you state it was "about a month ago" so there is a strong chance that the data was overwritten. You could use a disk editor to scan the drive for any specific text hits you know would be mentioned in the old...
  19. A

    Draft Annotated Bibliography

    Well done, Dennis...thank you. Tim, CCE
  20. A

    Another newbie thinking about CF...

    I would look into the CCE, then obtain a vendor certification such as FTK or EnCase. The Champlain certificate is good, but with your current education, it might not really stand out. You could substitute that cert. with the CCE. Good luck, Tim, CCE
  21. A

    Reading, john Vacca-Computer Forensics, now what?

    What is your day job and what qualifies you to conduct computer forensic examinations? Tim, CCE
  22. A


    Go to the job sites like "" or "" and do a search for "computer forensics". You will get a rather corporate list of what the market is like. It really only breaks down into 3 categories: Law Enforcement Corporate/Incident Response Private Practice So it would be difficult...
  23. A

    Schools ? -- IACIS training and certification. Tim, CCE
  24. A

    OFFICE.GHO - Help Needed!

    It is a Norton Ghost image file and you will need to purchase Norton Ghost (or Systemworks Pro). There is a program on the CD called "Explorer" that will open up Ghost images and view the original directory tree. Tim, CCE
  25. A

    What does a CCE earn?

    What I find interesting is the extensive education he apparently has, which could easily land a high-paying job in most IT fields. Tim, CCE
  26. A

    Which cert to get?

    There is not a specific study guide for the CCE because that would lessen the integrity of the CCE. If one could simply read a study guide and pass the CCE without formal training, the computer forensic world would be full of unqualified or under-qualified people. The CCE is a certification...
  27. A

    What does a CCE earn?

    Re: Other than the few years . . . <r><QUOTE author="walterbyrd"><s> </e></QUOTE> Lame or not, if it is what the employer requires, then one has little choice.<br/> <br/> Tim, CCE</r>
  28. A

    What does a CCE earn?

    It depends on the area. I do not charge that much for CF services, but I deal with small to medium-sized law firms and businesses. Depending on the service, I can expect anywhere between $150-$225 per hour. My clients find that reasonable and are willing to pay that without hassle. Tim, CCE
  29. A

    What do you all think of this program??

    I could not answer that because I do not know the instructor, or the materials covered in the class. If the class trains you for the IACIS certification, I would assume that the course materials are from someone in IACIS or has had training through IACIS and using similar materials. I would also...
  30. A

    RAM information

    website: Helix will allow you to dump system RAM out to an external file/device while the system is active. Tim, CCE
  31. A

    Which cert to get? Although you are not required to take the training courses offered by the various authorized training centers, you are still required to show substantial training or experience to be accepted into the testing process. As the website states: "In order...
  32. A

    What do you all think of this program??

    It would appear to provide a BASIC understanding of computer forensics, however, I feel one will need a minimum of a 4-year degree and other certifications to get into the field. The one problem I have with this particular college is the statement: "Completing students will also be ready to...
  33. A

    Is Computer Forecsics an over crowded field?

    One problem with your request is; in most circumstances you will not be able to look over the shoulder of someone doing a case because of the legalities of observing confidential matters, especially in a law enforcement environment. If you are able to get into law enforcement, you could possibly...
  34. A

    What does a CCE earn?

    It depends on the job market, personal experience, etc. I think those earnings are rare for a CCE in the corporate world or just starting out. Jobs that I've turned down were only in the mid to upper 30's. I find that wage a bit insulting. The real money is in a private practice for litigation...
  35. A

    Moderate experience, need tips on getting started

    Kennesaw State University - Cybercrime Institute Ask for Kris Turnbull Good Luck, Tim, CCE
  36. A

    Is it worth the money

    A starting point would depend on your current skillset with computers. If you have just a basic user knowledge of computers, then you should look into CompTIA A+ hardware & software training to start. Maybe not to get the certificate, but at least understand the material. Then, you might look...
  37. A

    Seasoned CF Professionals- guidance?

    The CCE is a start. That will give you the foundation of computer forensics training. Then, I would look into taking an EnCase course or two to become familiar with a forensic package. Read books, journals, etc. to see what others are doing in the field. With that said, as some of us have...
  38. A

    FTK, EnCase, ETC

    The only way I can put this is; you have "First Aid knowledge" and trying to be a "surgeon". If you are trying to gain information to conduct an actual examination, I would advise you to stop immediately and seek the services if a trained computer forensics professional. Computer data is highly...
  39. A

    FTK, EnCase, ETC

    Interesting concept, and I would agree that the only way to tackle something that vast is a distributed array of systems. To put this concept into a different perspective (if my calculations are correct); to image a 1EB (exabyte) drive or data, using today's standards, would require...
  40. A

    FTK, EnCase, ETC

    Ok..I won't go into great detail on the process but a general overview I think will get you on the right track. let's assume you are dealing with a standard Windows XP machine for the purpose of finding pictures for evidence. So...someone comes into the office and brings you a PC to examine. 1...
  41. A

    FTK, EnCase, ETC

    Well...since I was purposely trying to be vague... My point being, speaking generally, you do not install forensics software on a suspect PC to do an examination, but thank you for pointing out one of the rare moments one would need to capture physical RAM off a mainframe. So I guess the...
  42. A

    FTK, EnCase, ETC

    No...the analysis is done on the examination computer which is where EnCase, FTK, etc. would be loaded on to. You never conduct an examination directly on a suspect PC. Tim, CCE
  43. A

    Forensic use of Hiberfil.sys

    The Internet is a fountain of information, Grasshopper. Tim, CCE
  44. A

    Grants or Scolarships

    To add: Your local library should have a publication called "The College Bluebook: Guide to Fellowships, Grants and Loans" or something to that name. It is a periodically updated list of about every financial avenue available for college. Someone told me that "'college money' is out lying all...
  45. A

    Grants or Scolarships

    **Updated** <r>And you have no financial aid available to you? I would start with filling out the FAFSA (<URL url=""></URL>) to see what types of financial aid are available to you. I do not know of any computer forensic / Internet security grants...
  46. A

    Grants or Scolarships

    Grants or funding for what? Training? Education? Business? Tim, CCE
  47. A

    Court Cases with MSN Messenger logs

    Re: Hi again <r><QUOTE author="Forensic_Denmark"><s> </e></QUOTE> This is unethical (or at least heading down an unethical path). You should conduct an independent examination of the suspect media and form your OWN conclusion(s). I do defense work (not by choice), however if my examination...
  48. A

    Does anyone work for themselves?

    You will find a number of people here work for themselves as that is where the real money is, however, you will also find that most of these people have extensive computer and forensics background and training. The answer if one would be able to "feed the kids" or not depends on the individual's...
  49. A

    Sony PlayStation Portable

    I was thinking, when you are hooking the PSP up to a PC, are you selecting the "USB connection" option under "Settings" on the PSP? When you hook a PSP up to a computer, it does not automatically connect via USB. You have to go to that menu option and select it before the computer will see it...
  50. A

    Masters Degree School?

    If you do a forum search, I'm sure you will come up on a number of posts that address this question. That subject is discussed here often. Tim, CCE

About us

  • Our community began in 2004. Since this time, we have grown to have over 29,000+ members within the DFIR & Cyber Security community.

    We are happy to announce that this forum is now under new ownership with the goal to once again become the main Digital Forensics Forum on the internet for DFIR, OSINT and Cyber Security.

    If you can think of ways to help us improve, please let us know.

    We pride ourselves on offering unbiased, critical discussion among people of all different backgrounds.

    We are working every day to make sure our community is one of the best.

Quick Navigation

User Menu