±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 2 Overall: 32089
New Yesterday: 5 Visitors: 112

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

RSS Feed Widget

±Latest Webinars

FOR 585 Advanced Smartphone Forensics

Computer forensics training and education issues. If you are looking for topic suggestions for your project, thesis or dissertation please post here rather than the general discussion forum.
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
Go to page 1, 2  Next 
  

FOR 585 Advanced Smartphone Forensics

Post Posted: Thu Apr 06, 2017 12:26 am

So I will be going on the FOR 585 soon, and I was wondering if any of you have had experience on the course, or if anyone can just give me general advice on how to be prepared and what I'm looking at, I've obviously looked at the course material and etc. but if any of you guys have been on the course and can give me some extra advice I'd be grateful.
_________________
Digital Forensics is an Exact science, not the procedures, but the results. 

Vesalius
Member
 
 
  

Re: FOR 585 Advanced Smartphone Forensics

Post Posted: Thu Apr 06, 2017 2:36 pm

I haven't taken that course, but i've had SANS training earlier and if you're going abroad, the most important thing to bring is a power adapter and maby a extension cord, the power strips they have can sometimes be a bit short, and you don't want to run around town trying to find electronics gear during a break - been there done that.

Check that your laptop matches the minimum laptop specs, cam be a problem running some VMs if you only got 2GB memory. If you get the course material at the reception in the evening before the course, please extract images, tools and VMs at once so you don't have to worry about that when in class. You will also find any problems and solve them early instead of wasting time in class.

Finally, enjoy yourself and don't forget to explore the town. Most course attendees tend to hang around in the hotel or the training facility, I've gone out with my camera at the end of the day, exploring the town and hitting the restaurants hard Very Happy  

MDCR
Senior Member
 
 
  

Re: FOR 585 Advanced Smartphone Forensics

Post Posted: Fri Apr 07, 2017 12:47 pm

There's not much you can do to prepare in advance. If you feel like you must read something Heather Mahalik, one of the course authors and instructors, has a book she's co-authored using mostly open source tools. www.packtpub.com/books...er-mahalik

Otherwise, just make certain your computer is up to the minimum specs, like MDCR said. FOR 585 will be using smaller evidence files than something like FOR 408, but you still need quite a bit of RAM to dedicate to your VM, and fast storage isn't a bad idea either.

Show up awake and ready to learn. There's a ton of material in the books and the class moves very fast.  

Bulldawg
Senior Member
 
 
  

Re: FOR 585 Advanced Smartphone Forensics

Post Posted: Mon Apr 10, 2017 12:57 am

These replies are outstanding, thank you guys!
_________________
Digital Forensics is an Exact science, not the procedures, but the results. 

Vesalius
Member
 
 
  

Re: FOR 585 Advanced Smartphone Forensics

Post Posted: Mon Apr 10, 2017 3:28 am

I have taken the FOR585 course, i opted for the distance learning option. Having all course notes shipped to me to work from home.

I was very sceptical of 'working from home' as we all know learning at home can sometimes be a bit of a non go-er !

However the course structure with its online presentations i thought was really really good. The presentation was backed up with in depth notes provided. You also get a USB with all the material on, VM software and Windows 10 license.

It is a costly course, i would definitely recommend it.  

dandaman_24
Senior Member
 
 
  

Re: FOR 585 Advanced Smartphone Forensics

Post Posted: Thu Apr 13, 2017 9:03 am

Are you taking the class in London next month? If so, I look forward to seeing you there. You honestly do not need to read anything in advance, just make sure you bring a laptop that meets the requirements as others have said. I promise to entertain you with a good course. See you soon!  

HeatherM
Newbie
 
 
  

Re: FOR 585 Advanced Smartphone Forensics

Post Posted: Thu Apr 13, 2017 12:26 pm

I have taken the course and also hold the GASF cert that goes along with it.

Best thing to do in order to prepare is make sure you have a Windows laptop with you. While they'll supply a VM with all the tools in it: if something isn't working you'll have your own OS that you can play with.

You'll use all the tools: Cellebrite, Oxygen, XRY, IEF, etc. Unless they moved stuff around in the class now: the first day is hunting for malware on an Android OS. They'll go over basics like finding out if a phone was rooted/jailbroken and how to determine that.

I'll be interested to see what they did as well with the iOS since 10.3 just released with the new file system for the devices. Not sure how much it changed since I haven't seen it in the wild yet.

Keep your eyes and ears open during the entire thing if you plan on taking the cert. I found this course meshed VERY well with the SEC575: Mobile Device Security and Ethical Hacking course that SANS has as well.

Good luck!  

Randy_Randerson
Member
 
 

Reply to topicReply to topic

Share and Like this forum topic to get more replies




Page 1 of 2
Go to page 1, 2  Next