I'm excited to be teaching FOR498: Digital Acquisition and Rapid Triage at SANS DFIRCON Miami 2025 on Nov. 16-22, 2025. This course was designed to solve a challenge we see every day in the field: investigators are being asked to do more with less, and they don't always have the luxury of time when it matters most.
Our goal is to help you move beyond simply running tools and build the expertise and judgment that defines skilled forensics professionals. You'll learn not just how to perform each step, but why it matters, how the underlying data works, and how to recognize when results don't align with what you should expect.
Here's what you'll take away from the class:
How to go from device seizure to actionable intelligence in 90 minutes or less
Techniques to triage evidence efficiently and focus on what matters most
End-to-end workflows for acquisition, processing, and analysis
Methods for maintaining the chain of custody and documenting findings under scrutiny
The ability to recognize tool errors, artifacts that change, and meaningful "absence of evidence"
Whether you're working in the field as a law enforcement officer or in the lab as a digital forensic analyst, this course will raise the bar for what you and your team can accomplish.
Looking forward to seeing you in Miami this November!
0 Comments:
Post a Comment
Subscribe to Post Comments [Atom]
<< Home