$400 Amazon Gift Card with OnDemand Training through March 10 - Learn More!


To attend this webcast, login to your SANS Account or create your Account.

This webcast has been archived. To view the webcast login into your SANS Portal Account or create an account by clicking the "Get Registered" button on the right. Once you register, you can download the presentation slides below.

From Seizure to Actionable Intelligence in 90 Minutes or Less

  • Thursday, May 02, 2019 at 10:30 AM EDT (2019-05-02 14:30:00 UTC)
  • Kevin Ripa

You can now attend the webcast using your mobile device!



An effective battlefield forensicator must investigate large amounts of data quickly while maintaining data collection integrity and defensibility, often within high-stress environments. SANS is proud to introduce the FOR498: Battlefield Forensics & Data Acquisition, a new course authored by Instructors Eric Zimmerman and Kevin Ripa. This webcast will give you an overview of the contents of the 6 day course and the myriad of topics being covered. We will also dive deeper into a couple of the highlights, including booting an .E01 file in VMware to view the contents as though we were sitting at the subjects computer without spoliating the source evidence; discussing non-traditional acquisitions, and write blocking of devices that dont lend themselves to the traditional methods of protecting source data. We will cover a lot of ground in a little time, so bring a seatbelt!

Speaker Bio

Kevin Ripa

An investigator at heart, Kevin Ripa bought his first computer as a tool for writing reports for his private investigation agency. As he worked through typical user issues, the "why" of what was going wrong in his machine kept him up at night. So Kevin turned his investigative skills toward his computer and quickly became fascinated by the world inside of it. Now a 25-year veteran of the digital investigations field, Kevin's enthusiasm has not waned: "IT security and digital forensics still inspire me every day, and I can't wait to wake up in the morning and get to work!"


More info on Kevin can be found here: https://www.sans.org/instructors/kevin-ripa


Need Help? Visit our FAQ page or email webcast-support@sans.org.

Not able to attend a SANS webcast? All Webcasts are archived so you may view and listen at a time convenient to your schedule. View our webcast archive and access webcast recordings/PDF slides.