SANS Rocky Mountain Fall is Live Online! Join us Nov 2-7 MT for 17 interactive courses + NetWars. Save $300 thru 10/7.


To attend this webcast, login to your SANS Account or create your Account.

This webcast has been archived. To view the webcast login into your SANS Portal Account or create an account by clicking the "Get Registered" button on the right. Once you register, you can download the presentation slides below.

A Sneak Peek at Pokémon Go Forensic Artifacts

  • Tuesday, August 09, 2016 at 1:00 PM EDT (2016-08-09 17:00:00 UTC)
  • Cindy Murphy

You can now attend the webcast using your mobile device!



Pokémon Go is reported to be the most popular gaming app in US History, and download statistics within the first few days of the game going live support that. With huge numbers of people chasing invisible monsters around the globe using the augmented reality app, problems were bound to follow, and safety concerns have made headlines. But what information does the app store on Android and iOS apps that its installed on? Join us for this sneak preview into ongoing research about what forensic investigators can glean from the data stored by the app on a user's phone, and how to leverage these artifacts in your investigations.

The New GIAC Advanced Smartphone Forensics Certification (GASF) assesses and assures mastery of your abilities to perform forensic examinations of mobile phones, tablets, and like devices. This certification is not associated with any mobile forensics vendor or tool, making it the only vendor-agnostic mobile forensic certification in the industry.

GASF focuses on the skills you master to "outsmart" the mobile device; successfully obtaining the evidence mobile devices can contain in a forensically sound manner. Being GASF Certified ensures that you demonstrate an understanding of the fundamentals of mobile forensics, device file system analysis, mobile application behavior, event artifact analysis and the identification and analysis of mobile device malware.

Don't miss the opportunity to get certified in 2016! The FOR585 Advanced Smartphone Forensics course prepares you for your certification attempt. Take the course now and qualify for the special course/certification bundled price when the certification becomes available in September.

Last opportunities to take FOR585 in 2016:


SANS Virginia Beach 2016
Virginia Beach, VA | Aug 22 - Sept 2

SANS Network Security 2016
Las Vegas, NV | Sept 12 - 17 (Simulcast option)

Community SANS Madison FOR585
Madison, WI | Sept 19 - 24

SANS Baltimore 2016
Baltimore, MD | Oct 10 - 15


Learn at your own pace with four months of online access:

  • Custom quizzes and labs
  • MP3 archives of course lectures
  • All printed books and required materials
  • Subject-matter expert support throughout your study

SANS Certified Instructor
Twitter: @cindymurph

Speaker Bio

Cindy Murphy

Cindy Murphy, is co-owner, president and lead investigator at Gillware Digital Forensics. Cindy Murphy served in law enforcement for more than 30 years, including 24 years as a detective with the Madison Police Department in Wisconsin. During 17 of those years she worked as a certified digital forensics examiner. She is a SANS certified instructor and co-author of the SANS FOR585 Advanced Smartphone Forensics course. She earned her MSc in Forensic Computing and Cyber Crime Investigation through University College in Dublin. Cindy is also a veteran, a mother, a musician, a protester for first amendment rights, a Brittany Spaniel enthusiast, and an expert knot tier.

"Good, real-world experience. Clearly, Cindy has been there, done that." - Chris Mallow, University of Oklahoma
"Cindy is Awesome! She fully understands what is happening in the field and how to do our job better." - John P., Shell Oil

Need Help? Visit our FAQ page or email

Not able to attend a SANS webcast? All Webcasts are archived so you may view and listen at a time convenient to your schedule. View our webcast archive and access webcast recordings/PDF slides.