On Thu, Sep 07, 2023 at 12:51:32PM -0400, charles meyer wrote:
> Would you please share any computer forensic expert or resources I might
> consider contacting re: a library program I'm producing re: computer - tech
> fraud?
It's not clear to me why you'd want a forensic expert if the topic
you want to explore is computer fraud. I say that because a huge amount
of computer fraud takes place in plain sight and doesn't require any
forensic skills to understand. That isn't to say that *no skills*
are required; but I can explain (for example) a typical phishing operation
using a typosquatted domain to anyone who understands the concepts of
domains plus perhaps some basic DNS, HTML, and HTTP.
A forensic expert would be who you want if - for example - you had
a disk drive which had been previously held content that had been
deleted and wanted to ascertain whether it was possible to recover
the data in whole or part.
But perhaps I'm not understanding what your goal is and maybe those
last two paragraphs are completely irrelevant. ;) If so, please clarify
and I'll take a second try at this.
> I'm not certain who would be the certifying organization for a Computer
> Forensic Expert?
There are a lot of organizations offering a dizzying array of infosec
certifications, including for forensics and a myriad of other topics.
Not only are they all worthless cash cows, but they've driven the practice
of hiring-by-certification - which is convenient for recruiters/interviewers
but has led to disastrous outcomes...as we now see all day, every day,
in the ongoing parade of security breaches and dataloss incidents
happening at organizations staffed by people with a veritable alphabet
soup of certifications. Surely if this strategy was going to work,
it would have worked by now?
---rsk
|