Getting started in DFIR: Testing 1,2,3

Подробнее о видео

Getting started in digital forensics has never been easier. There's a myriad of ways into the field, but 'those that set themselves apart supplement training with personal research. One could even say that it's hard to just do one without the other. Seeing how your actions appear in the data will allow you to have a more complete understanding of what's going on under the hood. In this session, we look at some easy (and free!) methods of testing forensic artifacts to understand how they work, and how to identify potential activity that created them.

Speaker
Phill Moore is the co-author of the FOR308 course, the FOR308: Digital Forensics Essentials course provides the necessary knowledge to understand the Digital Forensics and Incident Response disciplines, how to be an effective and efficient Digital Forensics practitioner or Incident Responder, and how to effectively use digital evidence. an DFIR introductory course that teaches. Learn more at