Related Posts
More Posts
Has recession started??
Can anyone here give a referral?
How is the WLB in Pwc Insurance practice?
#pwc
Additional Posts in Cyber Security Bowl
Any tripwire pros here? How did you get started?
Views on carbon black as a product?
New to Fishbowl?
Download the Fishbowl app to
unlock all discussions on Fishbowl.
unlock all discussions on Fishbowl.







Websites:
Dfir.training. Lots of lists of resources here.
Aboutdfir.com
YouTube
13cubed
Learn Forensics with David Cowen
Books
I like Operating System Forensics. Minor complaint: The author claims this book is the first to have all three major OSes but I can think of at least two others published prior.
Tons more depending on what you want to learn. I would recommend digging into file systems if you’re doing host forensics. If you understand available evidence, then you can pick up tools quickly and can validate your findings at a deeper level if necessary. File System Forensic Analysis by Carrier is the one that comes up usually but it’s very dense. Forensic Examination of Windows Supported File Systems has practical exercises and is a much easier read, but it’s an expensive book. Pick up Digital Forensics Workbook for all kinds of basic exercises.
What’s your background?
Good stuff ey1!
Oh and get on twitter if you aren’t already and follow #DFIR.
I like 13 cubed a lot (YouTube). AD and Encase teach similar information in their boot camps so you’ll be getting relevant information.
I too am pondering entering this field. 4 yrs experience cyber General, and IAM specialty. I have my CISSP.
how prestigious is this job? Good pay? Long hours???
Regular hours decent pay maybe even really good. Especially if it is more of a CI job
I’m paid very well in incident response. I make a point to only work 40 hours if possible so that I’m well rested when things hit the fan and long hours are required.