Instructors

When Eric Zimmerman was a Special Agent with the FBI, one of his responsibilities was managing on-scene triage. He identified several gaps in an existing process and started creating solutions to address them. What began as building and expanding a few live response tools took Eric down a path that eventually led to him writing more than 50 programs that are now used by nearly 8,800 law enforcement officers in over 80 countries.

Much of Eric's work involved designing and building software related to investigations of sexual abuse of children. In a single year, Eric's programs led to the rescue of hundreds of these children. As a result, in May 2012, Eric was given a National Center for Missing and Exploited Children's Award, which honors outstanding law enforcement professionals who have performed above and beyond the call of duty. Eric was also presented with the U.S. Attorney's Award for Excellence in Law Enforcement in 2013.

Today, Eric serves as a Senior Director at Kroll in the company's cybersecurity and investigations practice. At SANS, he teaches the FOR508: Advanced Digital Forensics, Incident Response and Threat Hunting course, and is a two-time winner of the SANS DFIR NetWars Tournament (2014, 2015). Eric is also the award-winning author of X-Ways Forensics Practitioner's Guide, and has created many world-class, open-source forensic tools.

Eric is a sought-after instructor and speaker who brings expertise in the cyber realm, complex law enforcement investigations, computer forensics, expert witness testimony, computer systems design, and application architecture to his work and classroom.  

"I enjoy teaching this material because of how much potential there is in it to move cases forward quickly," says Eric. "With the pace at which computer storage continues to grow, it will become more and more important for people to understand the most cost-effective artifacts and techniques so these can be leveraged to move through data more quickly."

Eric's teaching philosophy focuses on the long-term gains achieved by not only understanding the nuts and bolts of how to run a tool and consume output, but also getting a deeper understanding of how tools work "under the hood." Those "a-ha" moments are what has kept Eric coming back to the classroom since 2008. His focus on understanding the big picture of digital forensics prepares students to perform better analysis, do new research of their own, and identify the best tools or techniques to perform successful investigations - all skills that will have a lifelong impact.

And even though work brings him great rewards, Eric understands the value of work/life balance. In his spare time, he enjoys spending time with his family, hiking, going to amusement parks with his two sons, and even fitting in a bit of video gaming when possible.

Qualifications Summary: 

• Former Federal Bureau of Investigation (FBI) Special Agent
• Creates and maintains many free world-class, open-source forensic tools
• Award-winning author of X-Ways Forensics Practitioner's Guide
• Recipient of the National Center for Missing and Exploited Children's Award and the U.S. Attorney's Award for Excellence in Law Enforcement

Get to Know Eric Zimmerman:

• Eric's blog: https://binaryforay.blogspot.com/
• GitHub:  https://github.com/EricZimmerman
• Listen to Eric's webcast: (Am) Cache Rules Everything Around Me

Here is What Students Say About Eric Zimmerman:

"It is easy to see how much passion Eric has for the topics he teaches" - Ken Saganowski, Kroll

"Deep knowledge - insightful. Gets questions answered thoroughly." - Daniel Lightfoot, PennyMac

"Good pace and content, he emphasis on important points." -  Rueben Rubio, Lord Abbett

"Eric epitimizes what it means to be a subject matter expert in this field. He really knows this material inside and out. Thank you for the high quality training." - Daniel Huynh

"The fact that SANS has managed to land someone like Eric Zimmerman, speaks volumes about the credibility they carry. Top notch."  - Chris Shandro, Blue Shield of California