SANS Digital Forensics and Incident Response Blog

Free Tableau Read-Only Forensic Kit For Every Student In The New SANS Computer Forensic and E-Discovery Essentials Course (SEC408)

SEC 408 Computer Forensic and E-Discovery Essentials Training -

Brand New Course Offered at SANS starting at SANSFIRE 2009 in Baltimore

Computer Forensic and E-Discovery Essentials is written for individuals who are new or looking to expand their skills in computer forensics, this course focuses on the essentials that a forensic investigator must know to investigate core computer crime incidents successfully. You will learn how computer forensic analysts focus on collecting and analyzing data from computer systems to track user-based activity that could be used internally or in civil/criminal litigation. This course covers the fundamental steps of the traditional computer forensic methodology so that each student will have the qualifications to work as an investigator in the field helping solve cases and fight crime.

SEC408 Computer Forensics and E-Discovery Essentials

A computer forensic analyst primarily focuses on collecting and analyzing data from computer systems to track user-based activity that could be used internally or in civil/criminal litigation. E-discovery civil litigation, intellectual property theft, disgruntled employee causing damage, and inappropriate use of the Internet are the types of cases a computer forensic analyst might encounter.

Part of the SANS Promise is that you will be equipped to handle investigations from day one after you finish the course. As a part of this promise, each investigator should have a read-only acquistion and examination kit in their forensic laboratory. This course will provide you with one of the leading Tableau forensic kits to accomplish this key function during an examination.

As a part of this exciting new course, each student will receive a Tableua Forensic Kit for SATA/IDE/SSD hard drives including adapters for both Firewire and USB acquisition and examination. SEC -408 Computer Forensic and E-Discovery Essentials is the only course at SANS that includes the Tableau adapter for each student taking the course. An incredible value!

Tuition Includes:

SANS Investigative Forensic Toolkit (SIFT) with a Tableau Read-Only Acquisition Kit

Every investigator should be equipped with a full toolkit to securely acquire or examine any type of hard drive. As a part of this course you will take home with you a version of the SANS Investigative Forensic Toolkit (SIFT) with a Tableau Read-Only Acquisition Kit. The entire kit will enable each new investigator to accomplish proper and secure examinations of SATA, IDE, or Solid State Drives (SSD).

Tableau T35E Read Only Kit with Forensic Notebook AdaptersThe SIFT Toolkit with Read-Only Forensic Kit consists of:

        • Tableau T35e Read-Only Forensic Kit
          • One Tableau T35e Read-Only FireWire to SATA/IDE Bridge
          • IDE Adapters
          • SATA Adapters
          • FireWire and USB Cable Adapters
          • One External Power Supply and power cable
          • Forensic Notebook Adapters (IDE/SATA)
          • Micro SATA Solid State Disk Adapter
          • Storage Bag for Kit
        • HELIX Incident Response & Computer Forensics Live CD
        • SANS VMware-Based Forensic Analysis Workstation
        • Course DVD: Loaded with case examples, tools, and documentation

SEC 408 Computer Forensic and E-Discovery Essentials Training Course will be offered in this summer at the following locations:

SANSFIRE 2009 Baltimore, MDJune 13, 2009 - June 22, 2009
SANS WhatWorks Summit in Forensics, and Incident Response Washington DC, DCJuly 05, 2009 - July 15, 2009