SANS Digital Forensics and Incident Response Blog

Windows Forensics In Depth — Ottawa, ON

SANS is coming to Ottawa, Ontario - August 28 - September 2, 2011. Among the courses offered will be Forensics 408: Computer Forensic Investigations - Windows In-Depth taught by Dave Hull who has nearly two decades of experience in IT and Information Security. In 2007 he founded Trusted Signal, an information security consultancy focused on incident response, computer forensics and e-discovery. Since that time Hull has worked on criminal and civil cases in U.S. Courts at the State and Federal levels in addition to assisting Fortune 500 companies with incident response and breach investigations. He brings a wealth of experience and knowledge to the classroom and has taught computer forensics to employees of corporations large and small as well as members of law enforcement, intelligence and military communities.

Students attending Forensics 408 will learn:

On Day 6 of this packed course, students will put their training to use with the Digital Forensic Challenge and Mock Trial.

Even highly experienced forensics practitioners who have taken Forensics 408 have been blown away by all of the artifacts Windows operating systems contain — artifacts that can easily make or break a case. No other course covers Windows Forensics quite like this.

On top of all this, students will receive a SANS Investigative Forensic Toolkit (SIFT) with a Tableau Write Block Acquisition Kit, giving students the equipment they need to follow industry best practices when acquiring SATA and IDE compatible hard disk drives.

Complete details and registration information for Computer Forensic Investigation - Windows In-Depth — Ottawa, ON may be found here. We'll see you there!