FORENSICS 526FORENSICS 526


Course PDF

This advanced course is perfect for the diligent student familiar with core forensic methodology and techniques. If you understand forensic filesystem fundamentals, then this course is for you. It moves quickly from covering memory forensics to recovering and discovering deleted partitions from hard drives. This course focuses on innovative forensic techniques and methodologies so the seasoned practitioner can keep his skills sharp and up-to-date with the latest research areas in both live and static based disk forensics.

You will receive:

  • Forensic analysis workstation VMware machine equipped to investigate forensic data
  • Course DVD loaded with case examples, tools, and documentation

Prerequisites: This advanced course is perfect for the diligent student conversant with file system forensic techniques. If you are just beginning in digital forensics, this course is not appropriate for you, as the basics of digital forensics will not be covered.




FORENSICS 526 Upcoming Events
Event Location Dates Delivery Method
SANS OnDemandOnlineAnytimeSelf Paced
SANS FOR526 At Euroforensics 2010Istanbul, TurkeyMar 28, 2010 - Mar 28, 2010Live Event
SANSFIRE 2010Baltimore, MDJun 06, 2010 - Jun 14, 2010Live Event
SANS Secure Singapore 2010Singapore, SingaporeOct 04, 2010 - Oct 11, 2010Live Event
"This is awsome! We're seeing details that most people don't even know exist" - John Wright, Info Tech, Inc.
"The class provided in-depth, real world, hands-on information" - Robert Dale Drollinger, General Dynamics
SANS Institute