+ Reply to Thread
Results 1 to 12 of 12
  1. Member
    Join Date
    Apr 2013
    Posts
    66

    Certifications
    CISSP | MCSE(NT4) | MCSE(W2k) | CCNA | CCA
    #1

    Default Computer Forensic certs that don't expire?

    Are there any good computer forensic certs that don't expire and have to be renewed every 2-3 years?
    I want something like the CISSP where once you have it, you have it. I don't mind getting some CPE, but having to study for a test every 2-3 years is too much.

    Anyone know of some decent ones?


    Thanks
    Reply With Quote Quote  

  2. SS -->
  3. They are watching you NetworkNewb's Avatar
    Join Date
    Feb 2015
    Location
    Off the grid
    Posts
    2,550

    Certifications
    A+/Net+/Sec+, CCENT, CCNA:Sec, CCSK, GCIH
    #2
    Only thing I could think of that doesn't expire would be a Bachelors or Masters degree
    Reply With Quote Quote  

  4. Senior Member cyberguypr's Avatar
    Join Date
    May 2007
    Location
    Chicago, IL
    Posts
    5,764

    Certifications
    GCFE, GCED, GCIH, CISSP, CCSP, and others that should never be mentioned
    #3
    GCFx, CCFP, CHFI, CCE, CSFA, and most other forensics certs offer a CPE or equivalent path. Some are harder or more expensive to complete than others but most do not require retesting. Having said that, why do you want a forensics cert? Is it a work requirement or a personal thing?
    Reply With Quote Quote  

  5. Member
    Join Date
    Apr 2013
    Posts
    66

    Certifications
    CISSP | MCSE(NT4) | MCSE(W2k) | CCNA | CCA
    #4
    Thanks. It's a work thing. I've been doing forensics for 15 years for legal cases, but it makes up maybe 1% of my job.
    98% of my job is internal networking, and 1% is pentesting. I do between 1-4 forensic cases a year on average.

    The partner I report to for forensics wants me to have a forensics cert in case I have to go to trial and testify. I see his point, but I want to just get it done and put it behind me. It's not like this is my 40 hour a week gig, it's probably 40 hours a year. And I really don't think I would ever want to transition to doing forensics full time.

    So really, I want the easiest cert with the least maintenance, that's not complete BS.

    He wants the EnCE, but I think that's not the easiest cert...
    Reply With Quote Quote  

  6. Senior Member cyberguypr's Avatar
    Join Date
    May 2007
    Location
    Chicago, IL
    Posts
    5,764

    Certifications
    GCFE, GCED, GCIH, CISSP, CCSP, and others that should never be mentioned
    #5
    I see your point. Well, you said no BS so that disqualifies the CHFI. Forgot to ask, who is paying for this?
    Reply With Quote Quote  

  7. this is my clone
    Join Date
    Jan 2014
    Location
    In the wires
    Posts
    333

    Certifications
    CISSP, GSEC, GCIH, MCSE, MCTS, ITIL-F, A+, Net+, Sec+, Linux+, Project+, ACE, CCNA R&S
    #6
    I think that the EnCase cert (EnCE) just teaches you how to use EnCase - kind of like how the ACE makes you an AccessData Certified Examiner (aka how to use our tools, mostly) but doesn't really teach forensic methodology. I think you are looking for something more along the lines of what cyberguypr said - GCFE/GCFA, CCFP, etc.
    Reply With Quote Quote  

  8. Member
    Join Date
    Apr 2013
    Posts
    66

    Certifications
    CISSP | MCSE(NT4) | MCSE(W2k) | CCNA | CCA
    #7
    Quote Originally Posted by cyberguypr View Post
    I see your point. Well, you said no BS so that disqualifies the CHFI. Forgot to ask, who is paying for this?
    lol, gotcha on the CHFI.
    They're paying for it, so I really don't care about price.
    I'll have to study for it on my own time, minus any classes which would be on their time.


    Quote Originally Posted by 5ekurity View Post
    I think that the EnCase cert (EnCE) just teaches you how to use EnCase - kind of like how the ACE makes you an AccessData Certified Examiner (aka how to use our tools, mostly) but doesn't really teach forensic methodology. I think you are looking for something more along the lines of what cyberguypr said - GCFE/GCFA, CCFP, etc.
    Thanks, I'll check our those.

    Edit: It looks like with both the GCFA and GCFE, all you have to do is take (1) SANs forensics class every 4 years and pay $400 to renew? If so, that's what I want!
    Last edited by 010101; 05-14-2015 at 05:41 PM.
    Reply With Quote Quote  

  9. Senior Member
    Join Date
    Mar 2014
    Posts
    617

    Certifications
    Alphabet-soup
    #8
    The FTK ACE has to be redone every year, but it's free, simple, etc. As others mentioned it wont teach you forensics as much as it goes over using their tool set. If you just want A certification for the sake of having one, ACE was simple when I had access to FTK and only took me about 20 minutes to complete.
    Reply With Quote Quote  

  10. Random Member docrice's Avatar
    Join Date
    Apr 2010
    Location
    Bay Area, CA
    Posts
    1,687

    Certifications
    GSEC, GCFW, GCIA, GCIH, GWAPT, GAWN, GPEN, GCFE, GCFA, GMON, OSWP, SFCP, SnortCP, Sec+; expired: CCNA (R&S, Security, Wireless), WCNA
    #9
    If cost is not much of a concern, I highly recommend SANS FOR408 and FOR508 (and the GCFE and GCFA respectively).
    Reply With Quote Quote  

  11. Member
    Join Date
    Apr 2013
    Posts
    66

    Certifications
    CISSP | MCSE(NT4) | MCSE(W2k) | CCNA | CCA
    #10
    Quote Originally Posted by BlackBeret View Post
    The FTK ACE has to be redone every year, but it's free, simple, etc. As others mentioned it wont teach you forensics as much as it goes over using their tool set. If you just want A certification for the sake of having one, ACE was simple when I had access to FTK and only took me about 20 minutes to complete.
    Win! I'll check it out, thanks!


    Quote Originally Posted by docrice View Post
    If cost is not much of a concern, I highly recommend SANS FOR408 and FOR508 (and the GCFE and GCFA respectively).
    Good stuff. I'm kind of leaning towards the GCFE after reading your post and others here and looking into it a little more.
    Seems like it's easy to maintain and won't burn a year of my life studying for it.

    Thanks to everyone who responded. Much appreciated.
    Reply With Quote Quote  

  12. Senior Member cyberguypr's Avatar
    Join Date
    May 2007
    Location
    Chicago, IL
    Posts
    5,764

    Certifications
    GCFE, GCED, GCIH, CISSP, CCSP, and others that should never be mentioned
    #11
    Are you planning on taking the class or just challenging the test?
    Reply With Quote Quote  

  13. Senior Member
    Join Date
    Feb 2015
    Location
    Tampa, FL
    Posts
    266

    Certifications
    GPEN/GCIH/CEH
    #12
    Actually I think the CCFE might be your best bet here!

    Certified Computer Forensics Examiner (CCFE)

    AFAIK the IACRB certs do not require recertification. And it would provide you the opportunity to review it for us!
    Reply With Quote Quote  

+ Reply to Thread

Social Networking & Bookmarks