Data Forensics - Building a new skill?

[Mushin]

I am interested in building a new skill set in the field of Data Forensics.
The end result is that I would love to consult for local police and provide them with data forensics services although I do not know how feisable that may be.

As with any skill there are tons of "training" materials that can be purchased to "teach" your the skill but I value the opions of people more than I value Google searches. Does anyone here provide data forensic services and do you have any advice on where to start?

Thanks

 

[RichmondTech]

I am interested in building a new skill set in the field of Data Forensics.
The end result is that I would love to consult for local police and provide them with data forensics services although I do not know how feisable that may be.

As with any skill there are tons of "training" materials that can be purchased to "teach" your the skill but I value the opions of people more than I value Google searches. Does anyone here provide data forensic services and do you have any advice on where to start?

Thanks

Here's my take on it:

1. Why do people always want to grow their menu of services? Changing your business to only do data forensics is one thing, but if you're just going to add that to what you already do then you're just going to spend time and money to be an ok data forensics person (because you're still doing other things to get paid that take up time and money so you can't truly be a great data forensics person). Why don't you just focus on the services that currently make you the most profit and be the best at that? Even if they're boring jobs, people get very excited about having a bank account that shows a positive balance!

2. I'm not sure I'd want to be in any business where my main source of income is from government agencies that are trying to find ways to cut costs.

Good luck!

 

[Mushin]

Here's my take on it:

1. Why do people always want to grow their menu of services? Changing your business to only do data forensics is one thing, but if you're just going to add that to what you already do then you're just going to spend time and money to be an ok data forensics person (because you're still doing other things to get paid that take up time and money so you can't truly be a great data forensics person). Why don't you just focus on the services that currently make you the most profit and be the best at that? Even if they're boring jobs, people get very excited about having a bank account that shows a positive balance!

2. I'm not sure I'd want to be in any business where my main source of income is from government agencies that are trying to find ways to cut costs.

Good luck!

Wow... you are reading way too much into my post and your reply is a bit off base because you know nothing about my business. We are an establilshed business with premium retail space. We have built a brad in our community and city that is well known. I have personally progressed beyond wanting to do the "normal" day in and day out as I can easily have employees do that.

Thus I want to develope a new skill set and data foresics if something I am interested in. In resposne to focusing on becoming the best at the one thing... well after 15+ years I think I have a pretty good understanding of the industry, my skill level, my business needs, and what skill may be beneficial to my business in the future.

I also know that just focusing on one thing can dull the blade and anytime you add a new skill it can feed outer skills.. Data forescis skills can help with data recovery and more.

My advice if you see a post about something please don't attack the post or reply with information that does not pertain to the question at hand. In my original post I asked if anyone provides this service and for advice on where to start... not a diatribe on staying with the status quo and assumptions on what is best for my situation.

 

[cmonova]

I personally do not do forensic services and there are a few reasons. I looked into it before and was contacted a few times from companies that actually
keep a database of "techs" or "forensic" or "experts" at their disposal.

The problem I see is where I live the local police dept has an IT staff (few people) but they have actually spent a ton of money on sending
these people to school/training in order to have them do the forensic stuff themselves. I contribute that to a few things. They don't like
going outside their circle for things and with more and more crimes regarding technology it makes sense to have their own people that they
can easily rely on.

Now not saying it still can't be done but just not really too sure how much of a market there really is going to be in that particular field.

 

[Mushin]

I personally do not do forensic services and there are a few reasons. I looked into it before and was contacted a few times from companies that actually
keep a database of "techs" or "forensic" or "experts" at their disposal.

The problem I see is where I live the local police dept has an IT staff (few people) but they have actually spent a ton of money on sending
these people to school/training in order to have them do the forensic stuff themselves. I contribute that to a few things. They don't like
going outside their circle for things and with more and more crimes regarding technology it makes sense to have their own people that they
can easily rely on.

Now not saying it still can't be done but just not really too sure how much of a market there really is going to be in that particular field.

This is a good point. In our area which is more rural there is a potential for "consulting" as resoruces for the local police is limited. With that being said I also think the "market" is growing so to speak. It will take work and effort but I am willing to put in the time and resource investment as it is a skill I want to add.

 

[acesdeals]

Here's my take on it:

1. Why do people always want to grow their menu of services? Changing your business to only do data forensics is one thing, but if you're just going to add that to what you already do then you're just going to spend time and money to be an ok data forensics person (because you're still doing other things to get paid that take up time and money so you can't truly be a great data forensics person). Why don't you just focus on the services that currently make you the most profit and be the best at that? Even if they're boring jobs, people get very excited about having a bank account that shows a positive balance!

2. I'm not sure I'd want to be in any business where my main source of income is from government agencies that are trying to find ways to cut costs.

Good luck!

He asked for training info

I took a forensics class and man is it hard, i know many parts of IT but forensics was very appealing to me as i wanted to work with the FBI and it was a really fun and exciting thing to do

But its difficult, i completed the class but did not take it again i wish i could learn it but its just not for me

It is basically data recovery but in data recovery they recover the whole drive and return it to the customer where as forensics you will not only recover but analyze the data and find hidden data

You can get some ebooks online and practice, the book i bought had some trial tools which were fun to use and maybe in the future i may try getting back into it

I learned some cool stuff though, hiding secret messages in pictures or corrupting data on purpose but by changing a single byte it could be the plans to a worldwide domination plot etc;

 

[dipper]

Personally I think it sounds like a cool thing to do but in reality it would be boring and involve way to much paperwork and hassle. Just think what could happen in court if you have stuffed just one small thing up or just the hassle if the defence thinks you've stuffed things up!

 

[grayfoxcomputing]

I've often thought about this as well. Here's a few resources to check out:

http://www.craigball.com/Becoming%20a%20Computer%20Forensic%20examiner.html

https://www.eccouncil.org/certification/computer_hacking_forensic_investigator.aspx

Get familiar with non-destructive recovery options. Most forensic software uses a livecd so it doesn't touch the data itself.

I would also suggest getting your Network+ cert just in case.

Not sure about your state's regulations, but you should probably be bonded too.

 

[Mushin]

Personally I think it sounds like a cool thing to do but in reality it would be boring and involve way to much paperwork and hassle. Just think what could happen in court if you have stuffed just one small thing up or just the hassle if the defence thinks you've stuffed things up!

But on the reverse side experts are just that and charge accordingly.
Attention to detial is as you have said key.

 

[mraikes]

But on the reverse side experts are just that and charge accordingly.
Attention to detial is as you have said key.

LOL! "Attention to detial"

 

[pcdrpros]

I just recently received my CCE (Certified Computer Examiner) in Computer Forensics from Emory University. I have a Bachelors in Computer Science and 7 years of experience in Information Technology and I must say that was one of the HARDEST and most tedious class that I have been through. I still have to turn in 2 case studies before I will be one of the 1812 computer forensic specialists in the US. With that being said, I never realized all that is involved in the process of computer forensics as far as the evidence and chain of custody!!! If you don't know what you are doing and you end up in court then you will get blasted by the judge and opposing attorney and the data you retrieved will be tossed out!

Anyway, I plan on using my skills to do more domestic type services as far as deleted text messages, emails, and that sort of thing.

Good Luck!