THE CFIN CERTIFICATION EXAMINATION
The initial Chartered Computer Examiner process consists of a multiple choice question and answer examination, the forensic examination of a floppy diskette, the forensic examination of a CDR disk and the forensic examination of an image of a hard disk drive. An 80% or better average score is required to complete the process. Once the written examinations have been completed, the applicant can then begin the practical forensic examination of the test media. The forensic examinations are designed to test the forensic knowledge and skills of the candidate. The candidate must have the appropriate tools.
The primary purpose of this certification is to measure if the applicant understands and uses sound evidence handling and storage procedures and follows sound forensic examinations procedures when conducting examinations.
The Examinations will be held on Saturday following the Boot Camp by registered participants at the Boot Camp.
The Chartered Computer Examiner examination is expected to test that the candidate has:
- A good understanding of basic rules of evidence, as they relate to:
- The seizure or acquisition of magnetic media
- The handling, marking and storage of electronic evidence
- The "chain of custody"
- The "right to privacy"
- A good understanding of how to wipe, verify and validate media
- A good understanding of how to protect the original media for accidental writes
- A good understanding of how to make and verify exact copies of media
- A basic understanding of PC hardware
- A basic understanding of PC networking
- A basic understanding of various Operating Systems
- A good understanding of Microsoft Office applications (and other similar applications) and how to access the metadata that is stored within MS Office documents (and others)
- A basic understanding of common data formats by header, appearance, etc.
- A basic understanding of how to defeat passwords
- A basic understanding of CDR recording processes
- A basic understanding of Internet issues, such as doing a "who is", determining ownership of a domain name, etc.
- A basic understanding of Electronic Accounting and Electronic Payment Systems
- A basic understanding of Forensic Accounting and Electronic Auditing
- A basic understanding of the nature and scope of digital and computer crime
- A basic understanding of the legal framework of digital and computer crime
- A good understanding of the prevention and detection of digital and computer crime
- A basic understanding of biometrics and handwriting analysis
- The ability to write clear understandable reports
- The ability to organize and present exhibits in or as an attachment to reports
- A good understanding of Digital and Computer Forensics as a Profession
- A good understanding of the Ethics of Digital and Computer Forensics.
|
