Rob Lee announced on the SANS
forensics blog that three new forensics-related courses will be
released at SANSFIRE 2009. Like probably everywhere at the moment,
training budgets are getting tighter by the minute, and unfortunately
it's not very likely I'll be attending any of these courses any time
soon. If, however, someone feels the urge to sponsor an infosec
professional looking for a career change into digital forensics (hint,
hint), don't hesitate to contact me :)
SEC 408 Forensic and E-Discovery Forensics :
Written for individuals who are new to computer forensics. The course will use EnCase and FTK as the primary tool focusing on traditional crimes that can be solved with computer forensics.
SEC 558 Network Forensics:
Network equipment such as web proxies, firewalls, IDS, and routers often contain evidence that can make or break a case. By capturing evidence from network-based devices, evidence can be recovered that does not even exist on endpoint hard drives.
SEC 606 Drive and Data Recovery Forensics:
Recovering data from dead hard drives, damaged hard drives, corrupt file systems. This course will teach content from the professional data recovery world merging it with information in the forensics world allowing you to maintain best evidence and recover the content you need.
Also don't forget about the other SANS forensic courses, which I'm sure all complement very well with the new courses:
SEC 508 Computer Forensics, Investigation, and Response
SEC 427 Browser Forensics
SEC 526 Advanced Filesystem Recovery and Memory Forensics
SEC 547 Macintosh, iPod and iPhone Forensics
SEC 408 Forensic and E-Discovery Forensics :
Written for individuals who are new to computer forensics. The course will use EnCase and FTK as the primary tool focusing on traditional crimes that can be solved with computer forensics.
SEC 558 Network Forensics:
Network equipment such as web proxies, firewalls, IDS, and routers often contain evidence that can make or break a case. By capturing evidence from network-based devices, evidence can be recovered that does not even exist on endpoint hard drives.
SEC 606 Drive and Data Recovery Forensics:
Recovering data from dead hard drives, damaged hard drives, corrupt file systems. This course will teach content from the professional data recovery world merging it with information in the forensics world allowing you to maintain best evidence and recover the content you need.
Also don't forget about the other SANS forensic courses, which I'm sure all complement very well with the new courses:
SEC 508 Computer Forensics, Investigation, and Response
SEC 427 Browser Forensics
SEC 526 Advanced Filesystem Recovery and Memory Forensics
SEC 547 Macintosh, iPod and iPhone Forensics
