| Whether monitoring the Internet for threats and chatter, capturing computer evidence, or crunching forensic data, Guidance Software's EnCase computer forensics software is recognized as the premier computer forensics tool on the market. For investigation professionals, EnCE certification tells the world that you've not only mastered the use of EnCase software, but also that you've acquired in-depth forensics knowledge and proper techniques for conducting complex computer examinations.
Written by two law enforcement professionals who are EnCE and computer forensics experts, this official guide prepares you for both phases of the EnCE exam: a computer-based test and a hands-on test that requires you to examine computer evidence.
Key topics include:
- Understanding Computer Hardware. Understanding computers is crucial for computer forensics experts who are frequently asked to describe systems to juries. The book explains a computer's components, boot process, partitions, and files systems.
- First Response. What to do and how to follow procedures when first entering a scene.
- Acquisition of Digital Evidence. Creating EnCase boot disks; booting with EnCase boot disks; and drive-to-drive, network cable, FastBloc, Linen and Enterprise acquisitions.
- EnCase Forensic Software Overview. Tour of EnCase environment including software, menus, and capabilities.
- Report Writing. Sample reports from real-life cases (names changed).
- EnCase Legal Journal. Essential information on operating within the law and giving expert testimony.
About the Author
Steve Bunting is a Captain with the University of Delaware Police Department, where he is responsible for computer forensics, video forensics, and investigations involving computers. He has over 30 years’ experience in law enforcement, and his background in computer forensics is extensive. He is a Certified Computer Forensics Technician (CCFT) and an EnCase Certified Examiner (EnCE). He was the recipient of the 2002 Guidance Software Certified Examiner Award of Excellence for receiving the highest test score on his certification examination. He holds a BS in Applied Professions/Business Management from Wilmington College and a Computer Applications Certificate in Network Environments from the University of Delaware. He has conducted computer forensic examinations for the University of Delaware and for numerous local, state, and federal agencies on an extreme variety of cases, including extortion, homicide, embezzlement, child exploitation, intellectual property theft, and unlawful intrusions into computer systems. He has testified in court on numerous occasions as a computer forensics expert. He has taught computer forensics for Guidance Software, makers of EnCase, and taught as a Lead Instructor at all course levels, including the Expert Series, with a particular emphasis on the “Internet and E-mail Examinations” course. He has been a presenter at several seminars and workshops, the author of numerous white papers, and maintains a website for cyber-crime and computer forensics issues: http://128.175.24.251/forensics/. |
|