Certified Analysts: GCFA

Latest Blog Posts

Inhibiting Malicious Macros by Blocking Risky API Calls
April 15, 2018 - 4:21 PM

Top 11 Reasons Why You Should NOT Miss the SANS DFIR Summit and Training th [...]
April 13, 2018 - 4:51 PM

SANS Threat Hunting and Incident Response Summit 2018 Call for Speakers - D [...]
January 29, 2018 - 4:02 PM

Latest Tweets @sansforensics

Step your game up AND save some change! Register by 10/24 &a [...]
October 15, 2018 - 8:00 AM

Get a 9.7" iPad, ASUS Chromebook C202SA or take $250 Off you [...]
October 15, 2018 - 5:30 AM

Get the scoop on the #SIFT workstation in this webcast with [...]
October 15, 2018 - 4:20 AM

Latest Papers

Evidence of Data Exfiltration via Containerised Applications on Virtual Private Servers
By Seth Enoka

Using Image Excerpts to Jumpstart Windows Forensic Analysis
By John Brown

Windows 10 as a Forensic Platform
By Ferenc Kovacs

"Rob has insight that few others have and that alone is worth the cost of the the course."
- Chris Spurrier, Xerox Corp

"Rob is great, just like all of the other SANS instructors I've had."
- Chris O'Keefe, The Community Preservation Corp

"Good, detailed information. This class has exceeded my expectations, as usual."
- Fahey Owens, Discover Financial Services