tag:blogger.com,1999:blog-6447283518071683105.post395997456930731721..comments2023-04-02T10:17:04.631-04:00Comments on Forensic Incident Response: Technique Developmenthogflyhttp://www.blogger.com/profile/00741773109962883616noreply@blogger.comBlogger3125tag:blogger.com,1999:blog-6447283518071683105.post-77676698909472646452008-06-21T21:34:00.000-04:002008-06-21T21:34:00.000-04:00Mark,That's alarming. Would I want that person as...Mark,<BR/>That's alarming. Would I want that person as my 'expert'? No, in fact I'd love to get that type of person on cross exam.<BR/><BR/>Troy - the field is definitely lacking the fundamentals. Any course, University, training etc that is vendor independent should force the trainee's to work with the lowest tech tool in order to get the job done. I have to wonder why there is no CBK for hogflyhttps://www.blogger.com/profile/00741773109962883616noreply@blogger.comtag:blogger.com,1999:blog-6447283518071683105.post-73516364890602389222008-06-21T19:39:00.000-04:002008-06-21T19:39:00.000-04:00Couldn't agree more. I would add, as Mark illustra...Couldn't agree more. I would add, as Mark illustrates, its not even process, procedure and technique that is most fundamental, it's the subject matter of digital forensics: data--file systems, data structures, file formats and how the OS and applications functions. Lack of knowledge about the actual data that forensics tools parse is almost standard operating procedure. <BR/><BR/>When people Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-6447283518071683105.post-63882218249753194282008-06-20T11:59:00.000-04:002008-06-20T11:59:00.000-04:00Well stated Hogfly. Lack of understanding is/will...Well stated Hogfly. <BR/><BR/>Lack of understanding is/will be a huge problem. With the availabilty of people to buy CF packages and just "Push the Button" we will be seeing more and more of people with a lack of understanding. As Operating Systems become more complex these CF people will become more and more dependent on their tools to tell them what is going on. <BR/><BR/>Here is a quick Mark McKinnonhttps://www.blogger.com/profile/06597353327384503465noreply@blogger.com