Encase Computer Forensics: The Official EnCE - Computer Forensics Certified Examiner

Guidance Software's EnCase product is the premier computer forensics tool on the market, used in law enforcement labs for digital evidence collection; in commercial settings for incident response and information assurance; and by the FBI and Department of Defense to detect domestic and international threats. This guide prepares readers for both the CBT and practical phases of the exam that validates mastery of EnCase. Written by two law enforcement professionals who are computer forensics specialists and EnCase trainers, it includes the "EnCase Legal Journal", essential for forensics investigators who need to be sure they are operating within the law and able to give expert testimony. The CD includes tools to help readers prepare for Phase II of the certification, which requires candidates to examine computer evidence, as well as a searchable PDF of the text.

Whether monitoring the Internet for threats and chatter, capturing computer evidence, or crunching forensic data, Guidance Software's EnCase computer forensics software is recognized as the premier computer forensics tool on the market. For investigation professionals, EnCE certification tells the world that you've not only mastered the use of EnCase software, but also that you've acquired in-depth forensics knowledge and proper techniques for conducting complex computer examinations.

Written by two law enforcement professionals who are EnCE and computer forensics experts, this official guide prepares you for both phases of the EnCE exam: a computer-based test and a hands-on test that requires you to examine computer evidence.

Key topics include:

• Understanding Computer Hardware. Understanding computers is crucial for computer forensics experts who are frequently asked to describe systems to juries. The book explains a computer's components, boot process, partitions, and files systems.

• First Response. What to do and how to follow procedures when first entering a scene.

• Acquisition of Digital Evidence. Creating EnCase boot disks; booting with EnCase boot disks; and drive-to-drive, network cable, FastBloc, Linen and Enterprise acquisitions.

• EnCase Forensic Software Overview. Tour of EnCase environment including software, menus, and capabilities.

• Report Writing. Sample reports from real-life cases (names changed).

• EnCase Legal Journal. Essential information on operating within the law and giving expert testimony.

Visit www.sybex.com for all of your professional certification needs.

Featured on the DVD

SYBEX TEST ENGINE
Test your knowledge with advanced testing software, bonus exams, and challenging exam practice questions.

ELECTRONIC FLASHCARDS
Reinforce what you've learned with flashcards that can run on PC, Pocket PC, or Palm handheld.

Also on the DVD, the entire book in searchable and printable PDF