Join BitSec Forensics, HBGary, and Fidelity Investments for a full day of cutting edge memory forensics training October 15, 2009 in Merrimack, New Hampshire.

This hands on course will prepare students to use HBGary’s Responder Field Edition to collect and analyze live evidence from a Windows computer system. Practical exercises will be conducted to present a number of real-life scenarios giving the investigator hands on practice with Responder in a controlled environment.

Emphasis is placed on acquiring useful information that can be extracted from the collected data, as well as correlating that information with the future static forensic process. This includes information from volatile system data and memory dumps, including:

* running processes
* open files and registry keys
* user accounts and logged in users
* open ports and their associated processes, and
* hooks into the IDT or SSDT.

Participants will also learn how to extract data artifacts from a physical memory image, such as e-mails, Internet browsing history, application heap & stack data, chat logs, etc. Once the artifacts have been identified, participants will generate a report of their findings.

Software Bundle Available at 20% of Retail!

Tuition: $1,200

Software Only: $997

Tuition/Software Bundle: $1,999

Register: training(at)bitsecforensics(dot)com or (877)272-1417

Download course brochure