FORENSICS 526

Advanced Filesystem Recovery and Memory Forensics

Monday, October 11, 2010 : 9am - 5pm
Michael Murr, SANS Certified Instructor
6 CPE Credits Per Day
NOTE: This course has recently changed from the SECURITY discipline to the new FORENSICS discipline. All content remains the same.

This advanced course is perfect for the diligent student familiar with core forensic methodology and techniques. If you understand forensic filesystem fundamentals, then this course is for you. It moves quickly from covering memory forensics to recovering and discovering deleted partitions from hard drives. This course focuses on innovative forensic techniques and methodologies so the seasoned practitioner can keep his skills sharp and up-to-date with the latest research areas in both live and static based disk forensics.

You will receive:

  • Forensic analysis workstation VMware machine equipped to investigate forensic data
  • Course DVD loaded with case examples, tools, and documentation

Prerequisites: This advanced course is perfect for the diligent student conversant with file system forensic techniques. If you are just beginning in digital forensics, this course is not appropriate for you, as the basics of digital forensics will not be covered.