Dedicated to the branch of forensic science encompassing the recovery and investigation of material found in digital devices, often in relation to computer crime. This field involves the application of several information security principles and aims to provide for attribution and event reconstruction following forth from audit processes. This subreddit is not limited to just personal computers and encompasses all media that may also fall under digital forensics (e.g., cellphones, video, etc.).
I am planning to do my EnCE certification. I did my due diligence on it and it was the only cheapest one i could find which holds any credible value to get a job irrespective of it being out dated. What i was wondering is why wouldn’t they give a limited time access to the tool if im paying for the certification? And for the first part of the exam, does the EnCE book which is on amazon for 42$ worth it? And for the second part which actually requires practical work, Im wondering how the scenarios are presented, and though on paper im required to use Encase to get the data, what if i use other tools to find the answers and submit? The data shouldnt change irrespective of the tool. Will i be asked to submit any screenshots?