Those who bring sunshine to the lives of others cannot keep it from themselves. J. M. Barrie
Idea Transcript
COMPUTER FORENSICS ANALYST Selection Process I.D. # 2017/0717 EXAMINATION PLAN 1.
WRITTEN EXAMINATION Multiple choice - 50 items Pass = 70% or better Weight = 40% Time Limit = 1 hour Top 10 passing scores to QAB CONTENT AREA Knowledge of Computer Systems and Forensic Techniques.
# OF ITEMS 50
PERCENTAGE 100%
REFERENCE SOURCES: International Association of Computer Investigative Specialists (IACIS) 2004. Introduction to Computer Forensics. Bits and Bytes pg. 2 & 7. Joann Kennedy and Doug Elrick. Boot Sequence pg. 1. Shawn Howell and Joe Duke. File Headers and Extensions pg. 2 – 3, Appendix E. Shawn Howell. First Responder, pg. 3 & 6. Steve Beltz, Maggi Holbrook, Stan Mitchell, Dan Purcell, and John Kent. Legal Issues – Part I Computer Search Warrants pg. 9. Gail Thackery and Jeff “Skip” Pikl. Legal Issues - Part II Searching, Seizure and Examining Computers pg. 18. Keith Chval. NTFS File System pg. 7. Al Hobbs and Keith Lockhart. Standards and Ethics pg. 3. David Citro and Joann Kennedy. The Fat File System pg. 2. Keith Lockhart and Chris Pater. Windows Evidence and Artifacts pg. 4. Bob Blader, Bill Harback, Joann Kennedy, and Russell Yawn. Forensic Discovery Wietse Venema, Dan Farmer. Chp 7. Persistence of deleted file information.
IDE/ATA Configuration Jumpers. http://www.pcguide.com/ref/hold/op/jumpide-c.html Center for Computer Forensics. http://www.computer-forensics.net/faqs Computer Forensics Testing Tools, National Institute of Standards and Technology. http://www.cftt.nist.gov/ http://dereknewton.com http://resources.infosecinstitute.com http://roussev.net/pubs/ http://whatis.techtarget.com http://www.4n6k.com http://www.crucial.com/usa http://www.epyxforensics.com http://www.forensicmag.com/articles http://www.forensicsoft.com http://www.forensicsware.com http://www.infosecisland.com http://www.sno.phy.queensu.ca http://www.techrepublic.com/article
REFERENCE SOURCES (continued): http://www.w7forums.com/threads https://blogs.technet.microsoft.com/askcore/ https://countuponsecurity.com https://mobileforensics.wordpress.com https://technet.microsoft.com/en-us/library https://www.guidancesoftware.com https://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us https://www.sevenforums.com/tutorials https://www.techwalla.com https://www.tekrevue.com iOS Developer Library. https://developer.apple.com/ Uniblue Systems Inc. http://filext.com This examination consists of 50 multiple choice questions, all are equally weighted. 2.
Qualifications Appraisal Board (QAB) Pass = 70% Weight = 60% The QAB is an oral board examination. Unlike a job interview, the QAB is very structured with three board members taking turns asking applicants a set number of questions. The same questions are asked of each applicant participating in the QAB for the open position. Since this is an examination applicants are not allowed to ask clarifying questions of the panel members.