Discussion on:

So you want to be a computer forensics expert

is probably a bit of a challenge.

I would also mention FTK by AccessData. More information about it can be found here:
http://accessdata.com/products/forensic-investigation/ftk

i am interested

We have one of the top security programs in the country here at the College of Computing and Informatics and UNC Charlotte. And yes we have a computer forensics program, which is becoming very popular. I actually attended at career fair not too long and there was a FBI agent and a Secret Service agent, both of whom specialized in computer forensics. So, there are definitely some great jobs out there.

Whats the cheapest way to get the certification needed for this skill.I've been in the IT field for 10yrs and I'm really looking to get into computer forensics.

a US critical infrastructure sysop and get free courses from DOH(S)...wait, no, it's called FEMA.

You can start by reading a number of books. I'm actually trying to remember which HOPE talk was given regarding forensics (at least one of several years worth so it'll take me some looking).

The real problem comes after the initial education though. In forensics, you have to be ready to back up your findings in court as an expert witness. To gain the credibility to be considered an expert witness, you need to work your way up to it. This takes time on the job. Frequently forensics folks have prior work history in law enforcement just to get the credibility by becoming known in the court system (as prosecutes witness not defendant). It's a hard position to earn and easily lost if you start being proven wrong on the stand.

My uneducated guess is that a university course and resulting co-op or whatever entry level work is going to be less expensive than going it alone and starting out as a complete unknown.

This is probably of interest to anyone looking at the article and ways to enter the computer forensics business:

http://www.hopenumbersix.net/mp3/16/basics_of_forensic_recovery.mp3

"
Basics of Forensic Recovery

Kall Loper

This presentation will introduce the basic model for forensic recovery of data in civil and criminal contexts. Technical challenges of acquisition and analysis will be briefly covered but the primary emphasis will be on the requirements of bringing data to court. Common tools will provide examples to illustrate the model. There will also be a brief discussion of provisions of the enforcement mechanisms of the Digital Millennium Copyright Act and recent case law dealing with failures to comply with production of evidence.
"

Just what I needed something else to listen to so I can waste some time.

Col

Always hear to help.

(HOPE 2 through HOPE 2010 talks are all available on each applicable conf website if your still looking for distractions.. lots of good stuff there too)

I'd love to but the startup costs are incredible. Startup costs are easily $30K or more for equipment and classes. After that your pay is low until you get experience. Once you have that, if you've been successful in the probationary phase, you get the big bucks!

EMD

Ispent years working on computer and finding files and hidden programs that maybe why I find Computer Forensics fascinating I never intend to be the one in court to prove the case but knowing computer forensics is a must if you are computer security you gota to know when to call in the big guns and I don't mean Fema Thank you for the time.

Having been a computer forensic expert for over 12 years, I can say that it's challenging however very rewarding, with more devices now in use there has been a significant increase in the number of cases involving digital based evidence. You might find this article I wrote of interest http://www.athenaforensics.co.uk/in-a-changing-world-new-evidence-brings-new-challenges