3 ms·
It depends. With law enforcement, probably. Abother option working for a cybersecurity firm and focus on post-intrusion forensics, etc. Also, working in inciden
by batch12 3y ago
It depends. With law enforcement, probably. Abother option working for a cybersecurity firm and focus on post-intrusion forensics, etc. Also, working in incident response for a large enough company will give you this experience too. Source- I held a role responsible for response and some forensics for years.
- giantg2 3y agoYeah, I mostly meant law enforcement. I probably couldn't reskill at this point anyways. I had a couple security courses including a forensics course in grad school. But it seems most places want people to be experts and don't offer any training. Things like CISSP don't seem to have very good hands-on training.
- batch12 3y agoThere are some podcasts like the DFIR podcast that can get you started with some concepts. I agree with the CISSP. That's more of a management level certification and focuses a lot on risk and other topics. It's a mile wide and an inch deep. If you're looking for other training, there are some SANS ($$$) classes or you can look into general courses that will teach you to use things like FTK or others like Magnet Axiom, Encase, etc. If you're interested, I know some folks deeper into forensics than I that can give me some more specific courses if you'd like- let me know.
- giantg2 3y agoThanks but I don't think I'll switch.