Call: (888) 458-3222
When looking to hire an examiner to work on a case experience and training are factors to be considered. We have summarized some of the credentials you should consider when evaluating tour examiner.
International Association of Computer Investigative Specialists (IACIS)
This is a several month, rigorous testing process that incorporates knowledge taught at one of the annual two week IACIS conferences (one in the USA and one in Europe) with a series of practical computer forensic exercises. Each practical exercise must be successfully completed and passed before moving onto the next exercise. Upon the successful completion of the practical examinations a written test is then administered. The final examination is narrative and has 100 questions covering a variety of fundamental computer forensic/digital evidence issues. Research and Cites made by the student must be in the “APA style.” The student must pass the written examination with a score of 80% or better. Re-certification is required after three years with a minimum of 60 hours of classroom time in computer or relevant investigative classes to maintain the CFCE certification.
The CFCE designation initially restricted the training and testing to those in law enforcement. Recently IACIS began offering an external CFCE exam program. Computer forensic examiners without a law enforcement background can complete the examination program and earn their CFCE.
Encase Certified Examiner (EnCE)
Guidance Software is a public company that develops and provides software solutions for digital investigations. Their EnCE certification consists of a test and a practical examination utilizing the EnCase computer forensic software that must be completed within 60 days with a passing score of 85%. The EnCE certifies the use of Guidance Software’s EnCase computer forensic software and acknowledges the user has “mastered” computer investigation methodology as well as the use of the EnCase computer forensic software during complex computer examinations. Recertification is required after two years with a minimum of thirty two credit hours of documented continuing education in Computer Forensics or Incident Response to maintain the EnCE certification.
Access Data is a vendor that provides forensic software corporations, law firms and government agencies. Their product Forensic Toolkit (FTK) is a software tool for conducting computer forensic examinations. The ACE certification credential indicates proficiency FTK. The ACE Certification is a free, online ACE exam. The ACE exam has both knowledge and practical based components. Re-certification is required after two years requiring the examiner to take the then current ACE exam using the most current versions of FTK tool set. There are no educational requirements to maintain the ACE credential.
BlackBag Technologies, Inc.
Blackbag's informal motto is "Data doesn't lie, people do". They also develop a suite of tools for conducting computer forensics examinations. BlackBag offers three different certifications based on training and examinations. Their highest level certification is the MICFE (Mac and IoS Forensic Examiner). To be eligible a candidate must exhibit three plus years in the field conducting digital forensic exams, complete 60 plus hours of training and receive a professional recommendation. Once eligibility is established and examination is administered that includes both knowledge and practical based questions. The written exam is 150 questions. The practical exam must be completed with 180 days. Recertification is every three years.
Center for Computer Forensics
21800 Melrose Ave
Southfield, MI 48075
This website is not intended to provide legal or professional advice. The site is merely a starting point to learn about the topics listed. While we attempt to maintain current, complete and accurate information we accept no responsibility for errors or omissions.