It's a great book that goes quite beyond EnCase software. It covers many additional concepts that help on a forensic work.
The tests at the end of each chapter help to resume the main topics.
I was looking for a book that covered all the additional knoledge that is missing on EnCase manuals and help. I found them here.
I eagerly waited for the arrival of this book so that I could start learning the new features of Encase 7, however when it arrived, I could only read about it, no hands on because it does not contain the application. I can down load evidence files, but without the application, it is useless!
This book help me prepare for the EnCase exam. Mr. Bunting really explain how to master EnCase 7 and provided tips and techniques that you can use in a real-life scenario. Again, Thank you to the author. This book is a must-have for aspiring EnCEs.
Very thorough study guide. The supplemental material is available online . Is very well written and has helped immensely. Great for review after taking encase I and II
I am very impressed with the new edition of the EnCase Certified Examiner study guide, but am a little disappointed that this edition is not available electronically and if I want it electronically, I have to purchase it again. This means when I travel I have to carry the book with me instead of having a pdf version on my laptop. The other online content does not seem too bad, other than it took a few hours to download because the site only allowed 5 simultaneous sessions. Overall, this is not a bad purchase, I just wish that it came in an electronic format so I could use it from my laptop.
There are only a few tens of thousands of people vitally concerned with EnCase - and most of us got quite a shock when Guidance Software, its publisher, released EnCase Forensic v7, a radical departure from previous versions.
That this book was released almost a year past its original announced publication date is evidence of this.
And evidence gathering and analysis is what EnCase is all about. It is the leading digital evidence acquisition and analysis tool. (It's actually a suite of tools that are transparently welded together.)
This is the third edition of this study guide. Guidance Software was once notorious for poor documentation. While that reputation has slowly been shed as Guidance has moved toward creating better documentation, the manual remained sparse with little explanation of the many tools available.
Steve Bunting filled that void with his first edition. While intended to help people prepare for the EnCase Certification exam, Bunting provides a self-teaching course in both using EnCase and a substantial explanation of the technology EnCase is used to explore. This quality makes it a much more useful tool than the EnCase manual itself for those willing to devote the time to thorough reading.
This time out, Bunting had his hands full with EnCase v7. The EnCase users forums have been filled with complaints, many of them justified, while many were clearly from people too busy to read the (adjective deleted) manual.
The book itself is what I have come to expect from Bunting. It is modular, broken down into small sections arranged in a logical, sequential manner. It is thorough, including short - and very necessary - sections on configuring computers for the vastly greater demands of v7. It is good, welcome and very useful information.
A couple of chapters are given to concise, but reasonable thorough, explanations of File System basics and proper acquisition procedures. The next or so pages are given to using EnCase. Every page is packed with specific detail. No padding here.
This is a teaching text, a study guide. No doubts about it. There are review questions at the end of each chapter. Even if you're not planning on taking the certification exam, the reviews are very helpful as a way to measure your comprehension. There is no cD with this edition. Instead the supplementary materials are available online.
Overall, Steve Bunting retains his reputation in my eyes as the author of the best EnCase study guide in print, even if it is the only one. If you use EnCase forensic and own or plan to upgrade to v7, you need this book.
Product Details :
Paperback: 744 pages
Publisher: Sybex; 3 edition (September 11, 2012)
Language: English
ISBN-10: 0470901063
ISBN-13: 978-0470901069
Product Dimensions: 7.3 x 1.5 x 9.2 inches
More Details about EnCase Computer Forensics -- The Official EnCE: EnCase Certified Examiner Study Guide 3rd edition
or
Download EnCase Computer Forensics -- The Official EnCE: EnCase Certified Examiner Study Guide 3rd edition PDF Ebook
No comments:
Post a Comment