Carving Network Packets from Unallocated Space

Teaching Schedule

FOR408: Windows Forensics

• 06/20/12 - 06/25/12 FOR408: Windows Forensics in Austin, TX at SANS Forensic Summit
• 08/07/12 - 09/13/12 FOR408: Windows Forensics in Online at SANS vLive
• 09/17/12 - 09/22/12 FOR408: Windows Forensics in Las Vegas, NV at SANS Network Security 2012
• 10/08/12 - 10/13/12 FOR408: Windows Forensics in Prague, CZ at SANS Forensics Europe

FOR508: Advanced Forensics and IR

• 07/09/12 - 07/14/12 FOR508: Advanced Forensics and IR in Washington, D.C. at SANSFIRE 2012

Memory Forensics

• 05/22/12 Memory Forensics in Las Vegas, NV at CEIC 2012