Getting Started with the SIFT Workstation Webcast with Rob Lee

An international team of forensics experts helped create the SIFT Workstation and made it available to the whole community as a public service. The free SIFT Workstation, that can match any modern forensic tool suite, is also featured in SANS FOR508: Advanced Threat Hunting and Incident Response course (www.sans.org/FOR508). It demonstrates that advanced investigations and responding to intrusions can be accomplished using cutting-edge open-source tools that are freely available and frequently updated. SIFT has become the most popular download on the SANS website. Over the past year, 20,000 individuals have downloaded the SIFT workstation and it has become a staple in many organizations key tools to perform investigations. This session will demonstrate some of the key tools and capabilities of the suite. You will learn how to leverage this powerful tool in your incident response capability in your organizations.
To download the SIFT Workstation please visit: dfir.to/SIFT-Download
Speaker Bio
Rob Lee is the curriculum lead and author for digital forensic and incident response at the SANS Institute (dfir.to/2yx0W5U) With more than 19 years of experience in computer forensics, vulnerability and exploit discovery, intrusion detection/prevention, and incident response, he provides consulting services via HARBINGERS LLC. in the Boston, MA. area. Before directing services at HARBINGERS, Rob worked with government agencies in law enforcement, defense, and intelligence communities as a lead for vulnerability discovery and exploit development teams supporting Title10/50 cyber operations. Following his work in the intel community, he worked at the incident response firm MANDIANT for 5 years. Notably, he co-authored MANDIANT's first detail threat intelligence reports on Chinese APT activity titled "M-Trends: The Advanced Persistent Threat."