Getting started in DFIR: Testing 1,2,3

Getting started in digital forensics has never been easier. There's a myriad of ways into the field, but 'those that set themselves apart supplement training with personal research. One could even say that it's hard to just do one without the other. Seeing how your actions appear in the data will allow you to have a more complete understanding of what's going on under the hood. In this session, we look at some easy (and free!) methods of testing forensic artifacts to understand how they work, and how to identify potential activity that created them.

Speaker

[noinformationavailable]

Great video! As a student who came into this with only a slight understanding of things like Volatility and basic packet sniffing, this has been such a great help :)

[tahken]

Thanks SANS for providing this content for free. But unfortunately the audio quality of this specialist is awful. Speaking without headset is not delivering an acceptable quality

[CrazyDayy]

W content L audio, but is manageable with subtitles on, I recommend opening subtitles to help

[marcschweiz]

Im sure the content is very good but i just could not finish it with the audio quality