The Certified Computer Examiner (CCE) examination, Level I will require:
The CCE Level I process should not be too difficult for experienced examiners who have a good knowledge of forensic examination procedures, basic legal considerations, basic networking principles, basic data recovery techniques, authenticating documents, basic password recovery and basic Internet issues.
The initial examination will consist of a proctored online multiple choice question and answer examination. The examination will cover essential forensic computer examination procedures, basic PC hardware construction and theory, very basic networking theory and basic data recovery techniques.
The problem set consists of the examination of a floppy diskette, a CD ROM and an image of a hard drive. The issues covered in the problems are what an examiner would normally encounter in civil or law enforcement examinations. We have not gone to extreme measures to hide data, such as bit shifting and splitting files. The problems are straight forward and reflect real issues.
You should be familiar with basic forensic procedures like chain of custody, storage, wiping, verification and validation of media, defeating passwords, accessing and interpreting MS WORD metadata, etc.
You should have received appropriate training or have experience conducting forensic computer examinations. You should have the appropriate hardware and software for conducting a thorough examination.
Read our web pages on the Skills Necessary, Study Guides, Software Necessary and the Training or Experience Necessary. If you feel you have the knowledge, experience, skills and software described on these pages, you should be able to successfully complete the CCE process and obtain the CCE certification.
|
