SEC595: Applied Data Science and AI/Machine Learning for Cybersecurity Professionals
SEC595Cyber Defense, Artificial Intelligence
SANS Community Benefits
Connect, learn, and share with other cybersecurity professionals
Missing SQLite Records Analysis
Missing SQLite Records Analysis (PDF, 6.15MB)Published: 12 Mar, 2021
Meet the Expert
Ian Whiffin
Ian Whiffin boasts an impressive 17-year career in policing, divided between the UK and Canada. His journey in Digital Forensics began in 2013 when he joined the Calgary Police Service as a police examiner. Over the last decade, Ian has worked on thousands of devices, tackling a wide variety of cases. His hands-on experience has often led him to develop innovative research and custom-coded solutions, which he generously shares on his website, doubleblak.com.
Related courses
- Slide 1 of 16
FOR589: Cybercrime Investigations
Intermediate FOR589Digital Forensics and Incident Response
- 5 Days (Instructor-Led)
- 30 CPEs / 30 Hours (Self-Paced)
- Labs: 20 Hands-On Labs
- Slide 2 of 16
FOR585: Smartphone Forensic Analysis In-Depth
MAJOR UPDATESEssentials FOR585Digital Forensics and Incident Response
- GIAC Advanced Smartphone Forensics (GASF)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 22 Hands-On Labs
- Slide 3 of 16
FOR478: Cyber Threat Intelligence Foundations
BETAEssentials FOR478Digital Forensics and Incident Response
- 2 Days (Instructor-Led)
- 12 CPEs / 12 Hours
- Labs: 8 Hands-On Labs
- Slide 4 of 16
FOR608: Enterprise-Class Incident Response & Threat Hunting
UPDATEDIntermediate FOR608Digital Forensics and Incident Response
- GIAC Enterprise Incident Responder (GEIR)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 20 Hands-On Labs
- Slide 5 of 16
FOR518: Mac and iOS Forensic Analysis and Incident Response
UPDATEDIntermediate FOR518Digital Forensics and Incident Response
- GIAC iOS and macOS Examiner (GIME)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 23 Hands-On Labs
- Slide 6 of 16
FOR508: Advanced Incident Response, Threat Hunting, and Digital Forensics
MAJOR UPDATESIntermediate FOR508Digital Forensics and Incident Response
- GIAC Certified Forensic Analyst (GCFA)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 35 Hands-On Labs
- Slide 7 of 16
FOR610: Reverse-Engineering Malware: Malware Analysis Tools and Techniques
Advanced FOR610Digital Forensics and Incident Response
- GIAC Reverse Engineering Malware (GREM)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 48 Hands-On Labs
- Slide 8 of 16
FOR578: Cyber Threat Intelligence
MAJOR UPDATESIntermediate FOR578Digital Forensics and Incident Response
- GIAC Cyber Threat Intelligence (GCTI)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 20 Hands-On Labs
- Slide 9 of 16
FOR509: Enterprise Cloud Forensics and Incident Response
MAJOR UPDATESIntermediate FOR509Digital Forensics and Incident Response
- GIAC Cloud Forensics Responder (GCFR)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 23 Hands-On Labs
- Slide 10 of 16
FOR528: Ransomware and Cyber Extortion
Intermediate FOR528Digital Forensics and Incident Response
- 4 Days (Instructor-Led)
- 24 CPEs / 24 Hours (Self-Paced)
- Labs: 13 Hands-On Labs
- Slide 11 of 16
FOR577: LINUX Incident Response and Threat Hunting
Intermediate FOR577Digital Forensics and Incident Response
- GIAC Linux Incident Responder (GLIR)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 23 Hands-On Labs
- Slide 12 of 16
FOR710: Reverse-Engineering Malware: Advanced Code Analysis
Advanced FOR710Digital Forensics and Incident Response
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 12 Hands-On Labs
- Slide 13 of 16
FOR498: Digital Acquisition and Rapid Triage
Essentials FOR498Digital Forensics and Incident Response- GIAC Battlefield Forensics and Acquisition (GBFA)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 20 Hands-On Labs
- Slide 14 of 16
FOR563: Applied AI for Digital Forensics and Incident Response: Leveraging Local Large Language Models
NEWIntermediate FOR563Digital Forensics and Incident Response, Artificial Intelligence- 1 Day (Instructor-Led)
- 6 CPEs / 6 Hours (Self-Paced)
- Labs: 4 Hands-On Labs
- Slide 15 of 16
FOR500: Windows Forensic Analysis
UPDATEDEssentials FOR500Digital Forensics and Incident Response
- GIAC Certified Forensic Examiner (GCFE)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 22 Hands-On Labs
- Slide 16 of 16
FOR572: Advanced Network Forensics: Threat Hunting, Analysis, and Incident Response
Advanced FOR572Digital Forensics and Incident Response
- GIAC Network Forensic Analyst (GNFA)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 20 Hands-On Labs