• Forensics Community
  • SANS Forensic Blog
  • Whitepapers
  • Webcasts
  • Forensic Links
  • Law Enforcement Links
  • Downloads
  • About SANS Forensics
• Forensic Courses
  • FORENSICS 408 - Computer Forensic Essentials
  • FORENSICS 508 - Computer Forensic Investigations and Incident Response
  • FORENSICS 526 - Advanced Filesystem Recovery and Memory Forensics
  • FORENSICS 558 - Network Forensics
  • FORENSICS 563 - Mobile Device Forensics
  • FORENSICS 606 - Drive and Data Recovery Forensics
  • FORENSICS 610 - Reverse-Engineering Malware: Malware Analysis Tools and Techniques
  • SIFT Toolkit - Essentials
  • SIFT Toolkit - Advanced
  • Free Assessment
  • Register Now
• Forensic Events
  • Forensics Events List
  • Forensics Summit - July 2010, DC
  • Forensics Summit - April 2010, London
• GIAC Forensic Certification
  • GCFA Certified Skills
  • GCFA Code of Ethics
  • GIAC Homepage
  • GIAC Certified Forensics Analysts
• SANS Instructors
  • SANS Instructors
  • Author Statement
• SANS Network
  • SANS Institute
  • Global Information Assurance Certification
  • SANS Internet Storm Center
  • SANS Technology Institute
  • SANS Software Security Institute
  • SANS Blogs

SANS COMPUTER FORENSICS GRADUATE THWARTS BANK HEIST. Headlines similar to these are now a reality as former students have emailed me regularly about how they were able to use their forensic skills in very real situations. Graduates in the Computer Forensics, Investigation & Response track are the front line troops deployed when incidents occur. From stopping online bank heists, to logic bombers destroying data that could have affected many lives, SANS forensic graduates are battling and winning the war on crime. Graduates have described solved cases involving computer break-ins, intellectual property theft, fraud, and, in some cases, internal infractions by belligerent employees. Knowing that this course places the correct methodology and knowledge in the hands of responders who thwart the plans of criminals or foreign cyber attacks brings me great comfort. Graduates are doing it. Daily. I am proud that the Computer Forensics, Investigation & Response course at SANS helped prepare them to fight and solve crime.
- Rob Lee

Rob Lee is a Director for MANDIANT (http://www.mandiant.com/), a leading provider of information security consulting services and software to Fortune 500 organizations and the U.S. Government. Rob is also the Curriculum Lead for Digital Forensic Training at the SANS Institute (http://forensics.sans.org/). Rob has more than 13 years experience in computer forensics, vulnerability and exploit discovery, intrusion detection/prevention, and incident response. Rob graduated from the U.S. Air Force Academy and served in the U.S. Air Force as a founding member of the 609th Information Warfare Squadron, the first U.S. military operational unit focused on Information Operations. Later, he was a member of the Air Force Office of Special Investigations where he conducted computer crime investigations, incident response, and computer forensics. Prior to joining MANDIANT, he directly worked with a variety of government agencies in the law enforcement, Dept. of Defense, and intelligence communities where he was the technical lead for a vulnerability discovery and exploit development team, lead for a cyber forensics branch, and led a computer forensic and security software development team. Rob also coauthored the bestselling book, Know Your Enemy, 2nd Edition. Rob earned his MBA from Georgetown University in Washington D.C. Finally, Rob was awarded the "Digital Forensic Examiner of the Year" from the Forensic 4Cast 2009 Awards.