Note: this offer is good for all officers of the law (city police, sheriffs, military, etc.)

Thanks,

John

Thanks and good luck with EnCase certification!

Click here to buy your copy now!

I started the sale last weekend and promised to sell the next 50 copies for $29.99.  I have sold eleven copies so far.  The remaining copies won’t last long, so click HERE to buy your copy now.

That is a savings of $10 off the original price which equates to approximately 25%.  These 50 copies are sure to go fast, so click here: http://encesecrets.com/ence-study-guide to get your copy today!

As always, if you have any feedback about the ebook or the site we’d love to hear from you.  Please send your emails to feedback@encesecrets.com.

Thanks and good luck with your EnCE certification!

That is it.  We want our customers to be happy and if you can honestly say that the eBook did not help you pass the EnCE exam, we will refund your money.

By doing these steps up front (i.e. prior to the second to last question) and together, you may uncover evidence that will lead you to the answer of other questions on the exam.  Because EnCase allows you to complete these steps simultaneously, you are also enhancing the efficiency of your analysis.  These steps should be obvious to experienced examiners but some people have a tendency to “hunt” for answers to individual questions in a test taking scenario. 

Back to the point regarding procrastination, by starting your analysis as soon as you receive the EnCE Practical you will allow yourself time to complete the required analysis and develop a thorough report.  Obviously, I don’t grade the EnCE Practical but my guess is the report that you submit is weighted very heavily in terms of whether you pass or fail the exam.  The report should clearly state your findings and be free from spelling and grammatical errors.  

In addition to being free from spelling and grammatical errors, the report should not be so technical that you have to be an expert in computer forensics to understand it.  Think of the audience for your reports (law enforcement, juries, management) and write your report so that they can understand it without you there to explain it. 

This and other strategies and techniques are fully discussed in the EnCE Study Guide available at EnCEsecrets.com.

Good luck with your EnCase Certification!

After passing the written portion of the exam, I felt as though studying the questions at the end of the chapters in The Official EnCE Study Guide would have been sufficient to pass the written exam.  I thoroughly enjoyed the class and if you have the means I’d suggest taking it.  If you are unable to take it, just be sure that you are very comfortable answering the questions at the end of each chapter of The Official EnCE Study Guide.   

The EnCE practical exam, however, was a different beast.  While the Bunting and Wei book helped me out with much of the exam, I also had to do a good deal of digging on the internet in order to find the information that I needed to complete the practical. As I’ve also previously mentioned, I believe the EnCase certification process has helped me become a better examiner. I routinely use the skills I used\learned while completing the EnCE practical and it was for these two reasons that I documented my notes and developed the Forensic Secrets eBook.

 The Forensic Secrets eBook contains in-depth coverage of:

• First response techniques
•  Recovering deleted partitions and files
• Registry analysis techniques
• Resident vs. Non-resident files
• Internet cookie analysis
• Concise definitions for unused disk area, unallocated clusters, pagefile.sys, hiberfil.sys, volume slack, file slack and RAM slack.
• Tips for EnCase reporting
• Link file analysis
• Removable media (USB) analysis
• SID analysis
• $MFT analysis
• Internet history analysis
• Recycle bin analysis
• Microsoft Office file analysis
• Data hiding techniques
• Password guessing techniques
• and much more 

To be clear, the Forensic Secrets eBook is not a braindump of the EnCE practical exam.  If that is what you are looking for, please look elsewhere.  If you are looking for a concise guide to the principals and techniques that are tested on the EnCE practical, the Forensic Secrets eBook is for you. 

In conclusion, if you are looking to obtain EnCase Certification my first recommendation would be to take the EnCE Prep class offered by Guidance Software to refresh your skills and prepare you for the written portion of the exam.  If you are unable to attend the EnCE Prep class, I would highly recommend purchasing The Official EnCE Study Guide and the Forensic Secrets eBook.  The official study guide will help you prepare for the written exam and the Forensic Secrets eBook will help you ace the EnCE practical.

Guidance Software has nullified this concern with the EnCase Certified Examiner (EnCE) certification.  While you could theoretically pass the written portion of the exam by studying a book such as The Official EnCase Certified Examiner Study Guide by Steve Bunting and William Wei, the practical portion of the exam requires at least a moderate amount of experience with computer forensic analysis. 

Even for the experienced examiner there are portions of the exam that can prove challenging.  In some cases the challenge is derived from the fact that the certification candidate has not performed a particular analysis technique before.  In other instances the challenge is in bringing seldom used analysis techniques to the forefront of one’s mind. Regardless of how the certification candidate is challenged, one thing holds true: Guidance Software has built the EnCE exam to test and reinforce the tenets of computer forensic analysis.  

I read a post in a computer forensics forum recently in which the poster was asking about computer forensics certifications.  The post is several years old but still relevant and somewhat humorous.  The individual was looking for information about the EnCE certification. He claimed to be looking for a certification that would help him increase his salary and enhance his ability “to get girls” and wondered whether the EnCE was his ticket.

In terms of the EnCE’s ability to help him increase his salary, I’d say it depends on the employer.  Some employers value the commitment that it takes to obtain a certification and will reward the individual appropriately, whether by salary increase or perhaps a bonus.  Other employers will view a certification as something that is just “nice to have” and let you go on your merry way.  In my opinion, certification (and the EnCE in particular) is a way to validate your skills. 

Computer forensics is a niche skill and while there may be a number of people out there who say they have used EnCase or “done forensics” before, there are not a tremendous number of people who have validated their skills by becoming certified. My advice to the previously mentioned prospective certification candidate is that the EnCE certification will make you stand out from the rest of the application pool being received by potential employers. Sure, there is always that guy who has no education beyond high school and no technical certifications but is an absolute genius when it comes to things IT. 

Unless you know this guy and have worked with him and can vouch for his skills, he’s just a guy who has some computer experience when it comes to the interview.  If you go in to the same interview with some experience and the EnCE, you win (in my opinion) because you have the experience and the certification to validate that experience,

I was married prior to obtaining the EnCE, so I can’t really opine on whether or not said certification enhances one’s ability “to get girls.”  If I were a betting man, which I am, I’d say no.  A technical certification may have worked to his advantage in the mid-Nineties, but these days most certifications are so dime-a-dozen that girls just aren’t impressed anymore.