Certified Analysts: GNFA

Latest Blog Posts

Strengthen Your Investigatory Powers by Taking the New FOR498: Battlefield [...]
September 16, 2019 - 7:41 PM

iOS Location Mapping with APOLLO Part 2: Cellular and Wi-Fi Data (locationd)
September 11, 2019 - 8:53 AM

iOS Location Mapping with APOLLO Part 1: I Know Where You Were Today, Yeste [...]
September 10, 2019 - 4:42 PM

Latest Tweets @sansforensics

Too often, our community thinks of CTI as a finished product [...]
September 18, 2019 - 8:25 PM

#FOR518 author Sarah Edwards (@iamevltwin) shares everything [...]
September 18, 2019 - 7:30 PM

#FOR500 Windows Forensics Analysis has been updated to provi [...]
September 18, 2019 - 6:15 PM

Latest Papers

ATT&CKing Threat Management: A Structured Methodology for Cyber Threat Analysis
By Andy Piazza

Leveraging the PE Rich Header for Static M alware D etection and Linking
By Maksim Dubyk

Analysis of a Multi-Architecture SSH Linux Backdoor
By Angel Alonso-Parrizas

"This course is filling in the blanks in my knowledge of how some things work. It is nice to know what the tools are doing."
- Douglas Couch, Purdue University

"I had taken several other forensic courses prior to this one, but none of them or their instructors made understanding forensic methodologies and techniques as clear and understandable as Rob Lee and this course has."
- Nathon Heck, Purdue

"A great course on timeline, registry, and restore point forensics. SANS is continuing to be the leader on teaching new techniques happening with forensics."
- Brad Garnett, Gibson County Sherrif's Dept.