Re: complete forensics suite for linux?

Top Page
Attachments:
Message as email
+ (text/plain)
Delete this message
Reply to this message
Author: Devin Rankin
Date:  
To: plug-discuss
Subject: Re: complete forensics suite for linux?
Well, back in 1998 when I got certified, there was only one organization doing
the certification of examiners. The International Association of Computer
Investigative Specialists. IACIS (www.cops.org). As the web address
implies, it was an organization made of of law enforcement people who were
dealing with computer crime. At the time, I was an officer with Phoenix
Police and assigned to Computer Service Bureau. They had just tripled their
computer forensic squad. From one to three and I was one of the new guys.

At the time, certification involved a 2 week class in Florida, followed by 8
"homework" problems that you had a year to compleat and submit back to them
for review. If you were able to demonstrate that you knew what you were
doing by resolving the "homework" then they would certify you as an examiner.

IACIS will only allow law enforcement people to take the class. So other
companies filled the void and started offering certification programs too.
Some better than other of course. Encase offers several levels of training
with their product (www.encase.com) and some community colleges are gearing
up to offer some sort of training program.

And that is more than anyone wanted to know I'm sure. :)


Devin

On 04/19/2005 11:25 pm, der.hans wrote:
> Am 19. Apr, 2005 schwätzte Devin Rankin so:
> > I have version 4 of Encase and I'm a certified computer forensic
> > examiner. So let me know if I can be of help.
>
> What does "certified computer forensic examiner" mean? Who certifies such
> things? Who needs people who are certified?
>
> *The Expirer*, because expiring minds want to know. :)
>
> ciao,
>
> der.hans

---------------------------------------------------
PLUG-discuss mailing list -
To subscribe, unsubscribe, or to change you mail settings:
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss