Computer Forensics InfoSec Pro Guide was the first book I read when I landed my first DFIR job. It's a quick read, but it gave me a great foundation to work from.

If you haven't done so already, start messing around with Linux. As your coursework evolves, you will probably spend a lot of time in that type of environment, so it pays to become familiar with it now.

Lastly, and this may be an old way of thinking, but if your degree is entirely focused on forensics, you may be spreading yourself too thin when it comes to finding a job after graduation. Having a well-rounded computer science background will make you much more marketable. With that in mind, I recommend checking out the Open Source CS Degree as it's a free way to gain that knowledge on your own.

u/notBenstar · 1 point r/forensics

I'm not in the field, but I've been picking up a lot of knowledge lately, about how to enter the field, there are 2 main types of computer forensics, recovering data from devices, and incident response. I haven't gotten into any IR yet, so I can only answer for the data recovery.

Tools:
Write blocker: this prevents any write commands from being sent to a drive you are imaging, thus preserving the hash id(s), so the evidence you find, if any, is much harder to dispute. You can have hardware and/or software write blockers.

Software: You have a pretty wide range of paid, and open source software to choose from, what you use is often decided by the task you're trying to complete. The 2 most popular paid suites are EnCase and FTK. I may be wrong here, but I think the more popular open source tools are SIFT and TSK (The Sleuth Kit).

I am having a hard time putting my thoughts into words as far as what computer forensics people do. I will edit when my brain starts working again.

In the mean time, I would highly recommend this book. The author is revered in the industry, and has written the book so anyone with a decent understanding of computers will be able to get into computer forensics, as a hobby, or as a career.

Professionals, chime in and correct me if I am wrong, or misleading with this answer.

u/BLAMO_ · 1 point r/digitalforensics

I see... Maybe a computer forensics book. This one is usually recommended as a starting point: https://www.amazon.ca/Computer-Forensics-InfoSec-Pro-Guide/dp/007174245X

It was a good intro for me.

Related categories:

Reddit mentions of Computer Forensics InfoSec Pro Guide

idea-bulb Interested in what Redditors like? Check out our Shuffle feature

Found 3 comments on Computer Forensics InfoSec Pro Guide:

Interested in what Redditors like? Check out our Shuffle feature