SANS FOR408 vs. FOR508

By Chad Tilbury on May 24, 2013 in Computer Forensics — Leave a comment

With the major expansion of forensic curriculum at the SANS Institute, I frequently get questions about what class(es) to take. If you are trying to decide between FOR408 (Windows Forensics) and FOR508 (Advanced Forensics and Incident Response), this is the best comparison I have seen online.

I found the following quote particularly insightful: “508 is not a more advanced version of the 408, it’s a completely different course with completely different objectives.”

No Comments

Be the first to start the conversation.

Leave a Reply