Community: Coin Holders

Latest Blog Posts

Investigating WMI Attacks
February 09, 2019 - 4:53 AM

Investigate and fight cyberattacks with SIFT Workstation
January 11, 2019 - 8:49 PM

Gamble? Not with your future
January 11, 2019 - 6:32 PM

Latest Tweets @sansforensics

. @hecfblog post: Daily Blog #628: DFIR in 120 Seconds http [...]
February 20, 2019 - 7:18 AM

Learn intelligence analysis techniques to perform proper cam [...]
February 19, 2019 - 9:55 PM

Join @chadtilbury & learn about Investigating WMI Attack [...]
February 19, 2019 - 9:50 PM

Latest Papers

Evidence of Data Exfiltration via Containerised Applications on Virtual Private Servers
By Seth Enoka

Using Image Excerpts to Jumpstart Windows Forensic Analysis
By John Brown

Windows 10 as a Forensic Platform
By Ferenc Kovacs

"This is awesome! We're seeing details that most people don't even know exist."
- John Wright, Info Tech, Inc.

"Rob is great, just like all of the other SANS instructors I've had."
- Chris O'Keefe, The Community Preservation Corp

"I had taken several other forensic courses prior to this one, but none of them or their instructors made understanding forensic methodologies and techniques as clear and understandable as Rob Lee and this course has."
- Nathon Heck, Purdue