From Seizure to Actionable Intelligence in 90 Minutes or Less

  • Webcast Aired Wednesday, 08 Jan 2020 10:00PM EST (09 Jan 2020 03:00 UTC)
  • Speaker: Eric Zimmerman

Note: This webcast is free of charge however a SANS portal account is required (see webcast link for details). With your Account you can view the archived version and download slides at any time after the webcast.

SANS Asia-Pacific Webcast Series- From Seizure to Actionable Intelligence in 90 Minutes or Less

An effective battlefield forensicator must investigate large amounts of data quickly while maintaining data collection integrity and defensibility, often within high-stress environments. SANS is proud to introduce the FOR498: Battlefield Forensics & Data Acquisition, a new course authored by Instructors Eric Zimmerman and Kevin Ripa. This webcast gives you an overview of the contents of the 6-day course and the myriad of topics being covered. The speaker dives deeper into a couple of the highlights, including booting an .E01 file in VMware to view the contents as though we were sitting at the subject's computer without spoliating the source evidence; discussing non-traditional acquisitions, and write blocking of devices that don't lend themselves to the traditional methods of protecting source data. It covers a lot of ground in a little time, so bring a seatbelt!