Certified Analysts

Latest Blog Posts

Inhibiting Malicious Macros by Blocking Risky API Calls
April 15, 2018 - 4:21 PM

Top 11 Reasons Why You Should NOT Miss the SANS DFIR Summit and Training th [...]
April 13, 2018 - 4:51 PM

SANS Threat Hunting and Incident Response Summit 2018 Call for Speakers - D [...]
January 29, 2018 - 4:02 PM

Latest Tweets @sansforensics

Two ways to experience #SANSSecurityWest ! Join us in #SanDi [...]
April 22, 2018 - 3:55 AM

Have you checked out the #FOR610 Coin Challenge yet? "R.E.M [...]
April 22, 2018 - 2:40 AM

We are anxious to read all of the submissions from the brigh [...]
April 21, 2018 - 11:30 PM

Latest Papers

Pick a Tool, the Right Tool: Developing a Practical Typology for Selecting Digital Forensics Tools
By Rick Kiper

Disrupting the Empire: Identifying PowerShell Empire Command and Control Activity
By Michael Long II

Automating Static File Analysis and Metadata Collection Using Laika BOSS
By Charles DiRaimondi IV

"This is awesome! We're seeing details that most people don't even know exist."
- John Wright, Info Tech, Inc.

"Rob is great, just like all of the other SANS instructors I've had."
- Chris O'Keefe, The Community Preservation Corp

"Good, detailed information. This class has exceeded my expectations, as usual."
- Fahey Owens, Discover Financial Services