FOR 585 Advanced Smartphone Forensics

Computer forensics training and education issues. If you are looking for topic suggestions for your project, thesis or dissertation please post here rather than the general discussion forum.
Go to page 1 , 2 Next

FOR 585 Advanced Smartphone Forensics

Post Posted: Thu Apr 06, 2017 5:26 am

So I will be going on the FOR 585 soon, and I was wondering if any of you have had experience on the course, or if anyone can just give me general advice on how to be prepared and what I'm looking at, I've obviously looked at the course material and etc. but if any of you guys have been on the course and can give me some extra advice I'd be grateful.


Digital Forensics is an Exact science, not the procedures, but the results. 

Vesalius
Senior Member

    Re: FOR 585 Advanced Smartphone Forensics

    Post Posted: Thu Apr 06, 2017 7:36 pm

    I haven't taken that course, but i've had SANS training earlier and if you're going abroad, the most important thing to bring is a power adapter and maby a extension cord, the power strips they have can sometimes be a bit short, and you don't want to run around town trying to find electronics gear during a break - been there done that.

    Check that your laptop matches the minimum laptop specs, cam be a problem running some VMs if you only got 2GB memory. If you get the course material at the reception in the evening before the course, please extract images, tools and VMs at once so you don't have to worry about that when in class. You will also find any problems and solve them early instead of wasting time in class.

    Finally, enjoy yourself and don't forget to explore the town. Most course attendees tend to hang around in the hotel or the training facility, I've gone out with my camera at the end of the day, exploring the town and hitting the restaurants hardVery Happy

    MDCR
    Senior Member

      Re: FOR 585 Advanced Smartphone Forensics

      Post Posted: Fri Apr 07, 2017 5:47 pm

      There's not much you can do to prepare in advance. If you feel like you must read something Heather Mahalik, one of the course authors and instructors, has a book she's co-authored using mostly open source tools. www.packtpub.com/books...er-mahalik

      Otherwise, just make certain your computer is up to the minimum specs, like MDCR said. FOR 585 will be using smaller evidence files than something like FOR 408, but you still need quite a bit of RAM to dedicate to your VM, and fast storage isn't a bad idea either.

      Show up awake and ready to learn. There's a ton of material in the books and the class moves very fast.

      Bulldawg
      Senior Member

        Re: FOR 585 Advanced Smartphone Forensics

        Post Posted: Mon Apr 10, 2017 5:57 am

        These replies are outstanding, thank you guys!


        Digital Forensics is an Exact science, not the procedures, but the results. 

        Vesalius
        Senior Member

          Re: FOR 585 Advanced Smartphone Forensics

          Post Posted: Mon Apr 10, 2017 8:28 am

          I have taken the FOR585 course, i opted for the distance learning option. Having all course notes shipped to me to work from home.

          I was very sceptical of 'working from home' as we all know learning at home can sometimes be a bit of a non go-er !

          However the course structure with its online presentations i thought was really really good. The presentation was backed up with in depth notes provided. You also get a USB with all the material on, VM software and Windows 10 license.

          It is a costly course, i would definitely recommend it.

          dandaman_24
          Senior Member

            Re: FOR 585 Advanced Smartphone Forensics

            Post Posted: Thu Apr 13, 2017 2:03 pm

            Are you taking the class in London next month? If so, I look forward to seeing you there. You honestly do not need to read anything in advance, just make sure you bring a laptop that meets the requirements as others have said. I promise to entertain you with a good course. See you soon!

            HeatherM
            Newbie

            Re: FOR 585 Advanced Smartphone Forensics

            Post Posted: Thu Apr 13, 2017 5:26 pm

            I have taken the course and also hold the GASF cert that goes along with it.

            Best thing to do in order to prepare is make sure you have a Windows laptop with you. While they'll supply a VM with all the tools in it: if something isn't working you'll have your own OS that you can play with.

            You'll use all the tools: Cellebrite, Oxygen, XRY, IEF, etc. Unless they moved stuff around in the class now: the first day is hunting for malware on an Android OS. They'll go over basics like finding out if a phone was rooted/jailbroken and how to determine that.

            I'll be interested to see what they did as well with the iOS since 10.3 just released with the new file system for the devices. Not sure how much it changed since I haven't seen it in the wild yet.

            Keep your eyes and ears open during the entire thing if you plan on taking the cert. I found this course meshed VERY well with the SEC575: Mobile Device Security and Ethical Hacking course that SANS has as well.

            Good luck!

            Randy_Randerson
            Member
              Page 1 of 2
              Go to page 1 , 2 Next




              ± Forensic Focus Partners

              ± Your Account



              Site Members:

              New Today: 0 Overall: 33343
              New Yesterday: 3 Visitors: 228

              ± Follow Forensic Focus

              Forensic Focus Facebook Page Forensic Focus on Twitter Forensic Focus LinkedIn Group Forensic Focus YouTube Channel

              RSS feeds: News Forums Articles

              ± Latest Articles

              ± Latest Webinars


              Build a Mobile Site
              View Site in Mobile | Classic
              Share by: