Getting Started with the SIFT Workstation Webcast with Rob Lee
An international team of forensics experts helped create the SANS Investigative Forensic Toolkit (SIFT) Workstation and made…
iOS 11 Isn’ t All Fun and Games
SANS instructors Heather Mahalik and Domenica “Lee” Crognale discuss iOS 11 messages and the differences they ha…
Incident Response in the Cloud
Moving from on-premises deployments to the cloud can offer incredible benefits to many organizations, including a plethora o…
Deciphering Browser Hieroglyphics
There are many valuable artifacts in modern browsers and not all are as easy to read as SQLite databases or JSON files. Ryan…
Windows SRUM Forensics
Richard Davis continues his “Introduction to Windows Forensics” series with a video about the System Resource Ut…
SANS Published New Memory Forensics Analysis Poster
Good news from SANS – they have published NEW Memory Forensics Analysis Poster! You can get your digital copy of …
Recover EXT File Systems with analyzeEXT
Have you ever faced a drive with deleted EXT file system? If yes, there is a really good tool for you – analyzeEXT by …
Windows 10 and beyond – What is your digital forensics investigation missing?
Windows Forensic Analysis is constantly progressing. If you have been doing digital forensics for the past few years and hav…
Detection of Backdating the System Clock in Windows
SANS Institute has published a whitepaper by Xiaoxi Fan titled “Detection of Backdating the System Clock in Windo…
A glimpse of the NEW FOR585 Advanced Smartphone Course
Smartphones are constantly changing and the course is forced to evolve. FOR585 has been updated and includes 7 new labs, new…
