EnCase Computer Forensics –– The Official EnCE: EnCase Certified Examiner Study Guide Paperback – 7 September 2012
|New from||Used from|
Frequently bought together
From the Back Cover
The Official Book for the EnCE(R) Exam
If you're getting ready for the new EnCE exam, this is the study guide you need. Updated to cover EnCase(R) Forensic v7, this new edition prepares you for both the Phase I and Phase II exams. You'll learn everything from identifying and searching hardware and files systems to acquiring digital evidence. In addition, the real-world scenarios, hands-on exercises, and up-to-date information on legal cases clearly show you how forensics professionals apply the information to do their jobs. Inside, you'll find:
Full coverage of all exam objectives in a systematic approach, so you can be confident you're getting the instruction you need for the exam
Hands-on labs to reinforce critical skills
Real-world scenarios that put what you've learned in the context of actual job roles
Challenging review questions in each chapter to prepare you for exam day
Exam Essentials, a key feature in each chapter that identifies critical areas you must become proficient in before taking the exam
Sybex Exam Prep Tools
Go to www.sybex.com/go/ence3e
and download a full set of electronic test prep tools to help you thoroughly prepare for the exam. These include:
- Chapter review questions
- Two full-length practice exams
- Over 100 electronic flashcards
- Glossary of Terms in PDF
- EnCase Legal Journal
- Sample evidence files
+ In-depth Preparation for the EnCE Exam for EnCase Forensic v7
+ The Only Official EnCE Certification Study Guide on the Market
+ Technically Reviewed and Approved by Guidance Software(TM)
+ Access to Practice Tests, Flashcards, Evidence Files, EnCase Legal Journal, and More
About the Author
No customer reviews
|5 star (0%)||0%|
|4 star (0%)||0%|
|3 star (0%)||0%|
|2 star (0%)||0%|
|1 star (0%)||0%|
Review this product
Most helpful customer reviews on Amazon.com
That this book was released almost a year past its original announced publication date is evidence of this.
And evidence gathering and analysis is what EnCase is all about. It is the leading digital evidence acquisition and analysis tool. (It's actually a suite of tools that are transparently welded together.)
This is the third edition of this study guide. Guidance Software was once notorious for poor documentation. While that reputation has slowly been shed as Guidance has moved toward creating better documentation, the manual remained sparse with little explanation of the many tools available.
Steve Bunting filled that void with his first edition. While intended to help people prepare for the EnCase Certification exam, Bunting provides a self-teaching course in both using EnCase and a substantial explanation of the technology EnCase is used to explore. This quality makes it a much more useful tool than the EnCase manual itself for those willing to devote the time to thorough reading.
This time out, Bunting had his hands full with EnCase v7. The EnCase users forums have been filled with complaints, many of them justified, while many were clearly from people too busy to read the (adjective deleted) manual.
The book itself is what I have come to expect from Bunting. It is modular, broken down into small sections arranged in a logical, sequential manner. It is thorough, including short - and very necessary - sections on configuring computers for the vastly greater demands of v7. It is good, welcome and very useful information.
A couple of chapters are given to concise, but reasonable thorough, explanations of File System basics and proper acquisition procedures. The next or so pages are given to using EnCase. Every page is packed with specific detail. No padding here.
This is a teaching text, a study guide. No doubts about it. There are review questions at the end of each chapter. Even if you're not planning on taking the certification exam, the reviews are very helpful as a way to measure your comprehension. There is no cD with this edition. Instead the supplementary materials are available online.
Overall, Steve Bunting retains his reputation in my eyes as the author of the best EnCase study guide in print, even if it is the only one. If you use EnCase forensic and own or plan to upgrade to v7, you need this book.