The initial CCE certification, the CCE, is non-operating system specific. The initial testing will focus on whether the examiner uses sound evidence handling procedures and sound forensic examinations procedures when conducting examinations and that the examiner has a general knowledge of computers and common files and issues. The initial CCE certification will require the actual examination of media. The file system specific endorsements will only require online examinations.
Various operating system specific endorsements are/will be available. Endorsements include:
- The Microsoft FAT (Windows 95/98) file systems and forensic issues related to those file systems.
- The Microsoft NTFS (Windows NT/2000/XP) file systems and forensic issues related to those file systems.
- The Unix/Linux file systems and forensic issues related to those file systems.
- The MAC/Apple file systems and forensic issues related to those file systems.
Those CCEs who obtain three or more file system endorsements will become Master Certified Computer Examiners (MCCE). |