- Amazon Student members save an additional 10% on Textbooks with promo code TEXTBOOK10. Enter code TEXTBOOK10 at checkout. Here's how (restrictions apply)
EnCase Computer Forensics -- The Official EnCE: EnCase Certified Examiner Study Guide Paperback – Sep 11 2012
|New from||Used from|
Special Offers and Product Promotions
Customers Who Bought This Item Also Bought
No Kindle device required. Download one of the Free Kindle apps to start reading Kindle books on your smartphone, tablet, and computer.
To get the free app, enter your e-mail address or mobile phone number.
From the Back Cover
The Official Book for the EnCE® Exam
If you're getting ready for the new EnCE exam, this is the study guide you need. Updated to cover EnCase® Forensic v7, this new edition prepares you for both the Phase I and Phase II exams. You'll learn everything from identifying and searching hardware and files systems to acquiring digital evidence. In addition, the real-world scenarios, hands-on exercises, and up-to-date information on legal cases clearly show you how forensics professionals apply the information to do their jobs. Inside, you'll find:
Full coverage of all exam objectives in a systematic approach, so you can be confident you're getting the instruction you need for the exam
Hands-on labs to reinforce critical skills
Real-world scenarios that put what you've learned in the context of actual job roles
Challenging review questions in each chapter to prepare you for exam day
Exam Essentials, a key feature in each chapter that identifies critical areas you must become proficient in before taking the exam
Sybex Exam Prep Tools
Go to www.sybex.com/go/ence3e
and download a full set of electronic test prep tools to help you thoroughly prepare for the exam. These include:
- Chapter review questions
- Two full-length practice exams
- Over 100 electronic flashcards
- Glossary of Terms in PDF
- EnCase Legal Journal
- Sample evidence files
+ In-depth Preparation for the EnCE Exam for EnCase Forensic v7
+ The Only Official EnCE Certification Study Guide on the Market
+ Technically Reviewed and Approved by Guidance Software
+ Access to Practice Tests, Flashcards, Evidence Files, EnCase Legal Journal, and More
About the Author
Steve Bunting, EnCE, CCFT, has over 30 years of law enforcement and computer forensics experience. He is a Senior Forensic Consultant for Forward Discovery, a global forensics consulting organization. Previously he served as a captain with the University of Delaware Police Department, where he conducted examinations of computer systems for federal, state, and local law enforcement. He is also the coauthor of Mastering Windows Network Forensics and Investigation.
Inside This Book(Learn More)
Most Helpful Customer Reviews on Amazon.com (beta)
That this book was released almost a year past its original announced publication date is evidence of this.
And evidence gathering and analysis is what EnCase is all about. It is the leading digital evidence acquisition and analysis tool. (It's actually a suite of tools that are transparently welded together.)
This is the third edition of this study guide. Guidance Software was once notorious for poor documentation. While that reputation has slowly been shed as Guidance has moved toward creating better documentation, the manual remained sparse with little explanation of the many tools available.
Steve Bunting filled that void with his first edition. While intended to help people prepare for the EnCase Certification exam, Bunting provides a self-teaching course in both using EnCase and a substantial explanation of the technology EnCase is used to explore. This quality makes it a much more useful tool than the EnCase manual itself for those willing to devote the time to thorough reading.
This time out, Bunting had his hands full with EnCase v7. The EnCase users forums have been filled with complaints, many of them justified, while many were clearly from people too busy to read the (adjective deleted) manual.
The book itself is what I have come to expect from Bunting. It is modular, broken down into small sections arranged in a logical, sequential manner. It is thorough, including short - and very necessary - sections on configuring computers for the vastly greater demands of v7. It is good, welcome and very useful information.
A couple of chapters are given to concise, but reasonable thorough, explanations of File System basics and proper acquisition procedures. The next or so pages are given to using EnCase. Every page is packed with specific detail. No padding here.
This is a teaching text, a study guide. No doubts about it. There are review questions at the end of each chapter. Even if you're not planning on taking the certification exam, the reviews are very helpful as a way to measure your comprehension. There is no cD with this edition. Instead the supplementary materials are available online.
Overall, Steve Bunting retains his reputation in my eyes as the author of the best EnCase study guide in print, even if it is the only one. If you use EnCase forensic and own or plan to upgrade to v7, you need this book.
The tests at the end of each chapter help to resume the main topics.
I was looking for a book that covered all the additional knoledge that is missing on EnCase manuals and help. I found them here.