From Seizure to Actionable Intelligence in 90 Minutes or Less

Подробнее о видео

An effective battlefield forensicator must investigate large amounts of data quickly while maintaining data collection integrity and defensibility, often within high-stress environments. SANS is proud to introduce the FOR498: Battlefield Forensics & Data Acquisition, a new course authored by Instructors Eric Zimmerman and Kevin Ripa. This webcast gives you an overview of the contents of the 6-day course and the myriad of topics being covered. Speaker dives deeper into a couple of the highlights, including booting an .E01 file in VMware to view the contents as though we were sitting at the subject's computer without spoliating the source evidence; discussing non-traditional acquisitions, and write blocking of devices that don't lend themselves to the traditional methods of protecting source data. It covers a lot of ground in a little time, so bring a seatbelt!

For more information about the FOR498 course visit:

Speaker Bio

Kevin Ripa

Kevin serves as president of The Grayson Group of Companies, which consists of Computer Evidence Recovery, Pro Data Recovery Inc., and J.S. Kramer & Associates, Inc. He provides investigative services to various levels of law enforcement, Fortune 500 companies, and the legal community. As a 25-year veteran of the digital investigations field, Kevin has designed, produced, hosted, and taught numerous industry-related courses, and has had over 100 speaking and training engagements with industry and law enforcement around the world. He holds a number of industry certifications, including four GIAC certifications (GCFE, GCFA, GSEC, GISF), EnCase Certified Examiner, Certified Data Recovery Professional, and more.