{"id":49,"date":"2012-12-23T15:46:27","date_gmt":"2012-12-23T20:46:27","guid":{"rendered":"http:\/\/www.sc4n6.com\/?p=49"},"modified":"2012-12-23T15:46:27","modified_gmt":"2012-12-23T20:46:27","slug":"avenues-to-entry-into-dfir","status":"publish","type":"post","link":"https:\/\/www.carolinacomputerforensics.com\/blog\/avenues-to-entry-into-dfir\/","title":{"rendered":"Avenues to Entry into DFIR"},"content":{"rendered":"

Over the past few years several people have asked me what the best route would be to enter the Digital Forensics \/ Incident Response field. \u00a0While there is no\u00a0best<\/em> method, there may be one that works well for you. I know the path I took had it’s challenges – mainly of acceptance – because in a corporate-world most at a senior-level management roles did not want to believe that the DF role was necessary. \u00a0For some reason, the IR role was something easier for them to understand. \u00a0In the non-corporate world, I had zero law enforcement background so obtaining my first South Carolina SLED Private Investigator’s license was challenging to say the least. \u00a0It was not easy to find a current SC PI that (1) understood what DF was; (2) understood it’s value in a priviate investigation; and (3) could provide proper “oversight” as required by SLED in the field of DF. \u00a0Most PI’s in SC still conduct photographic or location-based\u00a0surveillance\u00a0of some sort and very<\/strong> few (in SC) are properly credentialed and experienced in the digital forensics field. For more information on Digital Forensic licensing in SC see my post from December 17, 2012<\/a>.<\/p>\n

This brings us to the topic of\u00a0Avenues to Entry into Digital Forensics \/ Incident Response.\u00a0<\/em>\u00a0As I mentioned from the outset, I answer a several questions each month on how someone can enter the DF field; next month I will be speaking to a group of Network Security students at ECPI University<\/a>\u00a0about what employers are looking for in the network security field. \u00a0That topic will undoubtedly cross into the DFIR arena as they have \u00a0many commonalities.<\/p>\n

Some criteria for becoming a successful DFIR investigator or examiner would include:<\/p>\n