What’s New with FOR518 Mac and iOS Forensic Analysis & Incident Response

Описание: Mac and iOS forensics has changed rapidly in the last few years and SANS has revamped the FOR518 course to keep up with these changes. The FOR518 course now features a new name: Mac and iOS Forensics Analysis & Incident Response, 13 new labs, new course images including APFS based images and new scenarios. Join course author Sarah Edwards as she shares with you the latest new data - macOS, iOS Physical, iOS Backups, Time Machine & memory, integrating new macOS/iOS Security and Incident Response content along with traditional forensic analysis. Be one of the first to learn about all of the included artifacts in the course such as the new file system, plists, SQLite databases, new FINAL challenge, how to win the new course coin, and more.

To learn more about FOR518, please visit: http://sans.org/FOR518

Speaker Bio
Sarah Edwards

Sarah is a senior digital forensic analyst who has worked with various federal law enforcement agencies. She has performed a variety of investigations including computer intrusions, criminal, counter-intelligence, counter-narcotic, and counter-terrorism. Sarah's research and analytical interests include Mac forensics, mobile device forensics, digital profiling, and malware reverse engineering. Sarah has presented at the following industry conferences; Shmoocon, CEIC, BsidesNOLA, TechnoSecurity, HTCIA, and the SANS DFIR Summit. She has a Bachelor of Science in Information Technology from Rochester Institute of Technology and a Master's in Information Assurance from Capitol College.