Nothing will prepare you more than a full hands-on challenge utilizing the skills and knowledge presented throughout the week. In the morning, you will have the option of working in teams on a real forensic case in which evidence will be provided to you to analyze. The case will step you through proper acquisition, analysis, and reporting in preparation for a possible trial. Every team will work on the case for the majority of the day with the objective of discovering three critical pieces of evidence to present during the trial.
The case presented is a complex case based that will engage the individual to examine one of the most recent versions of the Windows Operating System released (Windows VISTA). The case took 3 weeks to create following a script that lays out the key parts of the case in correct time sequence to make for the most realistic training opportunity available. The case will utilize skills from each of the previous day's sections in order to solve the case.
The day will conclude with a mock trial in which presentations of the collected evidence will occur. The team with the best in-class presentation and short write-up will win the challenge and the case.
| SECURITY 408 Upcoming Events | |||
| Event | Location | Dates | Delivery Method |
| SANS vLive! - Security 408 - Rob Lee | SANS vLive! SEC408-200911, VA | Nov 30, 2009 - Feb 01, 2010 | |
| SANS CDI East 2009 | Washington DC | Dec 11, 2009 - Dec 18, 2009 | Live Event |
| SANS Security East 2010 | New Orleans, LA | Jan 10, 2010 - Jan 18, 2010 | Live Event |
| SANS 2010 | Orlando, FL | Mar 06, 2010 - Mar 15, 2010 | Live Event |
| SANS Security West 2010 | San Diego, CA | May 07, 2010 - May 15, 2010 | Live Event |
| SANS vLive! - SEC 408 - Rob Lee | SANS vLive! SEC408 - 201006, VA | Jun 08, 2010 - Aug 24, 2010 | |