Community SANS FOR500: Windows Forensic Analysis

This event has been cancelled. If you have any questions, please contact the event planner directly.


FOR500: Windows Forensic Analysis focuses on building in-depth digital forensics knowledge of the Microsoft Windows operating systems. You can't protect what you don't know about, and understanding forensic capabilities and artifacts is a core component of information security. Learn to recover, analyze, and authenticate forensic data on Windows systems. Understand how to track detailed user activity on your network and how to organize findings for use in incident response, internal investigations, and civil/criminal litigation. Use your new skills for validating security tools, enhancing vulnerability assessments, identifying insider threats, tracking hackers, and improving security policies. Whether you know it or not, Windows is silently recording an unimaginable amount of data about you and your users. FOR500 teaches you how to mine this mountain of data


  • When

  • Monday, July 24, 2017 - Saturday, July 29, 2017

  • Where

  • MOREnet Training Rooms
    221 North Stadium Blvd, Suite 201
    Columbia, MO 65203


Registration for this event is done through the SANS portal.  
To register for this event, go to this page Click Here and provide the requested information.