CDN$ 58.48
  • List Price: CDN$ 83.99
  • You Save: CDN$ 25.51 (30%)
Only 2 left in stock (more on the way).
Ships from and sold by Gift-wrap available.
EnCase Computer Forensics... has been added to your Cart
Have one to sell?
Flip to back Flip to front
Listen Playing... Paused   You're listening to a sample of the Audible audio edition.
Learn more
See all 3 images

EnCase Computer Forensics -- The Official EnCE: EnCase Certified Examiner Study Guide Paperback – Sep 11 2012

See all 2 formats and editions Hide other formats and editions
Amazon Price
New from Used from
Kindle Edition
"Please retry"
"Please retry"
CDN$ 58.48
CDN$ 48.92 CDN$ 33.53

Save an Additional 10% on Textbooks When you Join Amazon Student

Special Offers and Product Promotions

  • Amazon Student members save an additional 10% on Textbooks with promo code TEXTBOOK10. Enter code TEXTBOOK10 at checkout. Here's how (restrictions apply)

No Kindle device required. Download one of the Free Kindle apps to start reading Kindle books on your smartphone, tablet, and computer.

  • Apple
  • Android
  • Windows Phone
  • Android

To get the free app, enter your e-mail address or mobile phone number.

Product Details

  • Paperback: 744 pages
  • Publisher: Sybex; 3 edition (Sept. 11 2012)
  • Language: English
  • ISBN-10: 0470901063
  • ISBN-13: 978-0470901069
  • Product Dimensions: 18.8 x 3.9 x 23.6 cm
  • Shipping Weight: 975 g
  • Average Customer Review: Be the first to review this item
  • Amazon Bestsellers Rank: #42,995 in Books (See Top 100 in Books)
  •  Would you like to update product info, give feedback on images, or tell us about a lower price?

  • See Complete Table of Contents

Product Description

From the Back Cover

The Official Book for the EnCE® Exam

If you're getting ready for the new EnCE exam, this is the study guide you need. Updated to cover EnCase® Forensic v7, this new edition prepares you for both the Phase I and Phase II exams. You'll learn everything from identifying and searching hardware and files systems to acquiring digital evidence. In addition, the real-world scenarios, hands-on exercises, and up-to-date information on legal cases clearly show you how forensics professionals apply the information to do their jobs. Inside, you'll find:

Full coverage of all exam objectives in a systematic approach, so you can be confident you're getting the instruction you need for the exam

Hands-on labs to reinforce critical skills

Real-world scenarios that put what you've learned in the context of actual job roles

Challenging review questions in each chapter to prepare you for exam day

Exam Essentials, a key feature in each chapter that identifies critical areas you must become proficient in before taking the exam

Sybex Exam Prep Tools

Go to

and download a full set of electronic test prep tools to help you thoroughly prepare for the exam. These include:

  • Chapter review questions
  • Two full-length practice exams
  • Over 100 electronic flashcards
  • Glossary of Terms in PDF
  • EnCase Legal Journal
  • Sample evidence files

+ In-depth Preparation for the EnCE Exam for EnCase Forensic v7

+ The Only Official EnCE Certification Study Guide on the Market

+ Technically Reviewed and Approved by Guidance Software™

+ Access to Practice Tests, Flashcards, Evidence Files, EnCase Legal Journal, and More

About the Author

Steve Bunting, EnCE, CCFT, has over 30 years of law enforcement and computer forensics experience. He is a Senior Forensic Consultant for Forward Discovery, a global forensics consulting organization. Previously he served as a captain with the University of Delaware Police Department, where he conducted examinations of computer systems for federal, state, and local law enforcement. He is also the coauthor of Mastering Windows Network Forensics and Investigation.

Inside This Book

(Learn More)
Browse Sample Pages
Front Cover | Copyright | Table of Contents | Excerpt | Index
Search inside this book:

Customer Reviews

There are no customer reviews yet on
5 star
4 star
3 star
2 star
1 star

Most Helpful Customer Reviews on (beta) HASH(0x9e8815c4) out of 5 stars 27 reviews
12 of 12 people found the following review helpful
HASH(0x9f147d44) out of 5 stars The only study guide for the EnCase Certified Exam - and it is great Sept. 6 2012
By Jerry Saperstein - Published on
Format: Paperback Verified Purchase
There are only a few tens of thousands of people vitally concerned with EnCase - and most of us got quite a shock when Guidance Software, its publisher, released EnCase Forensic v7, a radical departure from previous versions.

That this book was released almost a year past its original announced publication date is evidence of this.

And evidence gathering and analysis is what EnCase is all about. It is the leading digital evidence acquisition and analysis tool. (It's actually a suite of tools that are transparently welded together.)

This is the third edition of this study guide. Guidance Software was once notorious for poor documentation. While that reputation has slowly been shed as Guidance has moved toward creating better documentation, the manual remained sparse with little explanation of the many tools available.

Steve Bunting filled that void with his first edition. While intended to help people prepare for the EnCase Certification exam, Bunting provides a self-teaching course in both using EnCase and a substantial explanation of the technology EnCase is used to explore. This quality makes it a much more useful tool than the EnCase manual itself for those willing to devote the time to thorough reading.

This time out, Bunting had his hands full with EnCase v7. The EnCase users forums have been filled with complaints, many of them justified, while many were clearly from people too busy to read the (adjective deleted) manual.

The book itself is what I have come to expect from Bunting. It is modular, broken down into small sections arranged in a logical, sequential manner. It is thorough, including short - and very necessary - sections on configuring computers for the vastly greater demands of v7. It is good, welcome and very useful information.

A couple of chapters are given to concise, but reasonable thorough, explanations of File System basics and proper acquisition procedures. The next or so pages are given to using EnCase. Every page is packed with specific detail. No padding here.

This is a teaching text, a study guide. No doubts about it. There are review questions at the end of each chapter. Even if you're not planning on taking the certification exam, the reviews are very helpful as a way to measure your comprehension. There is no cD with this edition. Instead the supplementary materials are available online.

Overall, Steve Bunting retains his reputation in my eyes as the author of the best EnCase study guide in print, even if it is the only one. If you use EnCase forensic and own or plan to upgrade to v7, you need this book.

5 of 5 people found the following review helpful
HASH(0x9e320048) out of 5 stars EnCase book nice, but not in electronic format Sept. 8 2012
By Aaron - Published on
Format: Paperback Verified Purchase
I am very impressed with the new edition of the EnCase Certified Examiner study guide, but am a little disappointed that this edition is not available electronically and if I want it electronically, I have to purchase it again. This means when I travel I have to carry the book with me instead of having a pdf version on my laptop. The other online content does not seem too bad, other than it took a few hours to download because the site only allowed 5 simultaneous sessions. Overall, this is not a bad purchase, I just wish that it came in an electronic format so I could use it from my laptop.
HASH(0x9e3077bc) out of 5 stars A Must for EnCe May 12 2013
By Jeremiah II - Published on
Format: Kindle Edition Verified Purchase
An excellent book for EnCe preparation or just learning the necessary techniques that Guidance hid in order to force EnCase users into their training programs. With well organized subjects, detailed explanations, sample questions, suggested concentration areas and plenty of illustrations, this book was better than the Guidance instructor sent to our group training program. However, The Kindle version for iPad, however, lacks features. Such as, after you've highlighted a few hundred lines, it would be helpful to be able to print out all your highlights as a study guide. Get the book, the tangible version.
HASH(0x9e3200fc) out of 5 stars Great book. I enjoyed and learnt reading it May 1 2013
By Gabriel Paradelo - Published on
Format: Paperback Verified Purchase
It's a great book that goes quite beyond EnCase software. It covers many additional concepts that help on a forensic work.
The tests at the end of each chapter help to resume the main topics.

I was looking for a book that covered all the additional knoledge that is missing on EnCase manuals and help. I found them here.
HASH(0x9e30bc0c) out of 5 stars requires a good teacher Sept. 4 2013
By mario - Published on
Format: Paperback Verified Purchase
This book helped me out a little during my forensics course, but i would say that i used it 30% of the time in class. some of the chapters are really too long to just sit and read even if you know some of the material. it would have been better if the author lighten the chapter load by breaking some sections into multiple chapters.