EnCE (EnCase Certified Examiner)
Guidance Software’s EnCase computer forensics tools and software is one of the best-known and most widely used items in many computer forensic professionals’ toolboxes, both inside and outside the law enforcement world. Thus, the company’s EnCE certification is attracting growing interest, investigation, and participation.
The program is designed to permit individuals to demonstrate competence with the EnCase tools as used when performing computer forensics investigations, as well as related research and analysis work. EnCase certification seeks to test the skills and knowledge of candidates, as well as to demonstrate significant experience and sufficient training to perform computer forensic work.
To obtain EnCE certification, candidates must pass a computer-based exam administered by Prometric, which consists of 180 multiple-choice and true/false questions and must be completed in two hours (80% or better score is required to pass). Once a candidate passes this exam, he or she is mailed a practical exam, which is based on a CD-ROM that contains a copy of the software and a set of evidence files from a hard disk and a floppy disk. Candidates must examine the evidence files and submit a written report within 60 days of their receipt to an assigned Certification Coordinator to report their findings; they are also assigned a coach who can provide mentoring and advice throughout this process (85% of better score is required to pass). Candidates who pass both exams are awarded the EnCE certification.
For more information, please visit http://www.encase.com/certification/ence.shtm. You’ll find pointers to a useful FAQ here, along with an EnCE study guide and other useful references and resources.