Jun 20

In recognition of your sacrifices for us, I’d like to offer a 25% discount on the Forensic Secrets eBook to all law enforcement officers.  To get your copy of the premier EnCase Certified Examiner study guide at the discounted rate, please send me an email at jgolinvaux@gmail.com with your name and the department\agency\bureau that you represent and I will provide details on how to complete your transaction.  I promise to maintain your privacy and will not share your information.

Note: this offer is good for all officers of the law (city police, sheriffs, military, etc.)

Thanks,

John

  • Share/Bookmark
Jun 11

I have corrected the problem with my website that was preventing visitors from downloading a sample of the Forensic Secrets eBook.  Click here to download the sample ence study guide now: http://www.4shared.com/document/6Nz1KzJu/Forensic_Secrets_Sample.html
Remember, your purchase is covered by a 100% money-back guarantee.

Thanks and good luck with EnCase certification!

  • Share/Bookmark
May 16

The EnCE study guide sale is over.  Thank you to all who purchased and good luck with the EnCE certification.

  • Share/Bookmark
May 4

Sales have been brisk since the Forensic Secrets ebook went on sale at the end of March.  I only have 3 copies remaining at the $29.99 sales price.  Once those 5 copies are gone, the price goes back up to $39.99.  If you are thinking about EnCE certification, buy now before the price goes back up.  Remember, your purchase is protected by a 100% money-back guarantee.

Click here to buy your copy now!

  • Share/Bookmark
Mar 25

The Forensic Secrets ebook has been flying off the shelves!  Grab your copy before its too late and the price goes back up.  The book is on sale for $29.99 but still comes with a full money-back guarantee.  This is your ticket to EnCE certification.  Remember, the Forensic Secrets ebook is not a cheat sheet; it will help you with the principles tested on the EnCE practical exam and will serve as a guide for years to come. 

I started the sale last weekend and promised to sell the next 50 copies for $29.99.  I have sold eleven copies so far.  The remaining copies won’t last long, so click HERE to buy your copy now.

  • Share/Bookmark
Mar 20

Hi folks.  Just a quick update from the staff at EnCEsecrets.com.  Sales of the Forensic Secrets ebook have been brisk and we’ve been getting a lot of good feedback. To celebrate the success of the ebook, we’ll be offering the next 50 copies of the book at $29.99. 

That is a savings of $10 off the original price which equates to approximately 25%.  These 50 copies are sure to go fast, so click here: http://encesecrets.com/ence-study-guide to get your copy today!

As always, if you have any feedback about the ebook or the site we’d love to hear from you.  Please send your emails to feedback@encesecrets.com.

Thanks and good luck with your EnCE certification!

  • Share/Bookmark
Sep 16

I thought I should mention that we at EnCEsecrets.com are so certain that our EnCE Study Guide, the Forensic Secrets eBook, will help you pass the EnCE exam that we offer a money-back guarantee.  The terms of the money-back guarantee are listed on our FAQ page, but basically the deal is that if you pass the written portion of the EnCE and then buy the Forensic Secrets eBook and don’t feel that the eBook helped you pass the practical we will refund the full purchase price of the eBook to you. 

That is it.  We want our customers to be happy and if you can honestly say that the eBook did not help you pass the EnCE exam, we will refund your money.

  • Share/Bookmark
Sep 15

The best advice that I can give to those who are about to begin the EnCase Certified Examiner Practical exam is to develop a test taking strategy and to not procrastinate.  When you receive the practical exam and evidence files, read all of the questions and develop a strategy for your analysis so that it flows logically.  If, for example, when reading the test questions you notice that the second to last question is going to require a hash analysis, part of your strategy might be to hash all of the files as soon as you get the evidence added to your case.  While you are at it, run a file signature analysis as well and potentially search for internet history and email.  

By doing these steps up front (i.e. prior to the second to last question) and together, you may uncover evidence that will lead you to the answer of other questions on the exam.  Because EnCase allows you to complete these steps simultaneously, you are also enhancing the efficiency of your analysis.  These steps should be obvious to experienced examiners but some people have a tendency to “hunt” for answers to individual questions in a test taking scenario. 

Back to the point regarding procrastination, by starting your analysis as soon as you receive the EnCE Practical you will allow yourself time to complete the required analysis and develop a thorough report.  Obviously, I don’t grade the EnCE Practical but my guess is the report that you submit is weighted very heavily in terms of whether you pass or fail the exam.  The report should clearly state your findings and be free from spelling and grammatical errors.  

In addition to being free from spelling and grammatical errors, the report should not be so technical that you have to be an expert in computer forensics to understand it.  Think of the audience for your reports (law enforcement, juries, management) and write your report so that they can understand it without you there to explain it. 

This and other strategies and techniques are fully discussed in the EnCE Study Guide available at EnCEsecrets.com.

Good luck with your EnCase Certification!

  • Share/Bookmark
Sep 11

As I mentioned elsewhere on my site, I had the luxury of attending the EnCE Prep Class offered by Guidance Software.  In the class we reviewed various techniques and we received an EnCE study guide that was essentially a compilation of the manuals for the Guidance Software Computer Forensics 1 and Computer Forensics 2 courses.  I had also purchased The Official EnCE Study Guide by Steve Bunting and William Wei to augment my studies.  

After passing the written portion of the exam, I felt as though studying the questions at the end of the chapters in The Official EnCE Study Guide would have been sufficient to pass the written exam.  I thoroughly enjoyed the class and if you have the means I’d suggest taking it.  If you are unable to take it, just be sure that you are very comfortable answering the questions at the end of each chapter of The Official EnCE Study Guide.   

The EnCE practical exam, however, was a different beast.  While the Bunting and Wei book helped me out with much of the exam, I also had to do a good deal of digging on the internet in order to find the information that I needed to complete the practical. As I’ve also previously mentioned, I believe the EnCase certification process has helped me become a better examiner. I routinely use the skills I used\learned while completing the EnCE practical and it was for these two reasons that I documented my notes and developed the Forensic Secrets eBook.

 The Forensic Secrets eBook contains in-depth coverage of:

  • First response techniques
  •  Recovering deleted partitions and files
  • Registry analysis techniques
  • Resident vs. Non-resident files
  • Internet cookie analysis
  • Concise definitions for unused disk area, unallocated clusters, pagefile.sys, hiberfil.sys, volume slack, file slack and RAM slack.
  • Tips for EnCase reporting
  • Link file analysis
  • Removable media (USB) analysis
  • SID analysis
  • $MFT analysis
  • Internet history analysis
  • Recycle bin analysis
  • Microsoft Office file analysis
  • Data hiding techniques
  • Password guessing techniques
  • and much more 

To be clear, the Forensic Secrets eBook is not a braindump of the EnCE practical exam.  If that is what you are looking for, please look elsewhere.  If you are looking for a concise guide to the principals and techniques that are tested on the EnCE practical, the Forensic Secrets eBook is for you. 

In conclusion, if you are looking to obtain EnCase Certification my first recommendation would be to take the EnCE Prep class offered by Guidance Software to refresh your skills and prepare you for the written portion of the exam.  If you are unable to attend the EnCE Prep class, I would highly recommend purchasing The Official EnCE Study Guide and the Forensic Secrets eBook.  The official study guide will help you prepare for the written exam and the Forensic Secrets eBook will help you ace the EnCE practical.

  • Share/Bookmark
Sep 8

The value of certification is debatable.  For many certifications it is possible to simply study a book, maybe purchase some Transcenders, take the exam and call yourself “certified.”  I know several people who have brought “certified” individuals in for interviews and sat them down in front of relevant operating system or piece of equipment only to find that this person either has no idea how to log on or to power on the equipment. 

Guidance Software has nullified this concern with the EnCase Certified Examiner (EnCE) certification.  While you could theoretically pass the written portion of the exam by studying a book such as The Official EnCase Certified Examiner Study Guide by Steve Bunting and William Wei, the practical portion of the exam requires at least a moderate amount of experience with computer forensic analysis. 

Even for the experienced examiner there are portions of the exam that can prove challenging.  In some cases the challenge is derived from the fact that the certification candidate has not performed a particular analysis technique before.  In other instances the challenge is in bringing seldom used analysis techniques to the forefront of one’s mind. Regardless of how the certification candidate is challenged, one thing holds true: Guidance Software has built the EnCE exam to test and reinforce the tenets of computer forensic analysis.  

I read a post in a computer forensics forum recently in which the poster was asking about computer forensics certifications.  The post is several years old but still relevant and somewhat humorous.  The individual was looking for information about the EnCE certification. He claimed to be looking for a certification that would help him increase his salary and enhance his ability “to get girls” and wondered whether the EnCE was his ticket.

In terms of the EnCE’s ability to help him increase his salary, I’d say it depends on the employer.  Some employers value the commitment that it takes to obtain a certification and will reward the individual appropriately, whether by salary increase or perhaps a bonus.  Other employers will view a certification as something that is just “nice to have” and let you go on your merry way.  In my opinion, certification (and the EnCE in particular) is a way to validate your skills. 

Computer forensics is a niche skill and while there may be a number of people out there who say they have used EnCase or “done forensics” before, there are not a tremendous number of people who have validated their skills by becoming certified. My advice to the previously mentioned prospective certification candidate is that the EnCE certification will make you stand out from the rest of the application pool being received by potential employers. Sure, there is always that guy who has no education beyond high school and no technical certifications but is an absolute genius when it comes to things IT. 

Unless you know this guy and have worked with him and can vouch for his skills, he’s just a guy who has some computer experience when it comes to the interview.  If you go in to the same interview with some experience and the EnCE, you win (in my opinion) because you have the experience and the certification to validate that experience,

I was married prior to obtaining the EnCE, so I can’t really opine on whether or not said certification enhances one’s ability “to get girls.”  If I were a betting man, which I am, I’d say no.  A technical certification may have worked to his advantage in the mid-Nineties, but these days most certifications are so dime-a-dozen that girls just aren’t impressed anymore.

  • Share/Bookmark

« Previous Entries