SEC595: Applied Data Science and AI/Machine Learning for Cybersecurity Professionals

Experience SANS training through course previews.
Learn MoreLet us help.
Contact usBecome a member for instant access to our free resources.
Sign UpWe're here to help.
Contact UsCybersecurity professionals are often faced with complex, high-stakes investigations where quick decision-making and investigative accuracy are critical. However, many practitioners struggle to balance the rapid response required in Incident Response (IR) with the deep analytical mindset needed for Digital Forensics (DF). Without a structured investigative approach, security teams risk missing key evidence, drawing premature conclusions, or failing to remediate threats effectively. This presentation, “Think Like an Examiner: Strengthening Your Forensic & Response Mindset,” explores how cybersecurity professionals can develop a structured, examiner-focused approach that enhances both forensic accuracy and incident response agility. By shifting from a reactive mindset to an investigative mindset, examiners can improve their ability to analyze threats, preserve critical evidence, and make confident decisions in high-pressure environments.
Tony Knutson is a Principal Consultant at Palo Alto Unit 42. He is also part of the SANS OnDemand SME team.
Read more about Tony Knutson