@paaledai, It's not very clear as to whether you are looking for a School that offers a degree program with Digital Forensics concentration, or for some materials to help you dive in to the Forensics world. There might be some institutions that provide non-degree courses in e-Discovery and Digital Forensics, or you could choose one or two of the related courses (if offered) toward your traditional CS/IT degree program; but I highly doubt that there's any such program for undergraduate degree seekers that would grant you a Forensics degree. Furthermore, you should also understand that Digital Forensics is a large umbrella that houses some distinct specializations: Windows Forensics, UNIX Forensics, Malware Forensics, and Network Forensics are among the major ones, and there are separate books out there published for each of those concentrations, heavily drilled down into respective subject matters. Another important fact worth knowing is: An in-depth knowledge of each platform, associated risks, probable threats, and the native and possible vulnerabilities are some of the elements a successful Forensics analyst should be equipped with - precisely one should have a detailed knowledge of non-technical concepts like Chain of Custody, Law enforcement regulations, privacy acts, Litigation matters etc. Such concepts can be learned through courses and seminars, and as a bonus one can also learn techniques such as Remote Disk Mounting, Acquiring images, copying real-time memory and process dumps etc., but understanding the OS threat behaviors and the detailed risk factors are some of the investigative requirements, which need a substantial amount of familiarity and experience with the OS environment you are analyzing. It's undoubtedly a great field to be in - provided that you are technically competent, and are determined to strictly abide by the regulations and legal requirements. It pays off pretty well too! I have been using Forensics tool 'EnCase' for quite some time, and have some experience around it. If you are looking for some sources to understand and learn EnCase, Computer Forensics, or e-Discovery as a whole, I can possibly help pointing you to the right direction. But before that, I'm interested to know if that's really what your intent and goal is.  ~@~

SAAJHA · Feb 27, 2010 11:09 AM