SANS GASF - Mobile ...
 
Notifications
Clear all

SANS GASF - Mobile Forensics

4 Posts
3 Users
0 Reactions
1,389 Views
(@sureng)
New Member
Joined: 12 years ago
Posts: 4
Topic starter  

Hello Everyone,

I am planning to attend SANS live training "FOR585 Advanced Smartphone Forensics" and prep for GASF certification.

Is FOR585 too advanced? I don't have any background in mobile forensics but from the website it says no prerequisites required. Also by looking at contents of the course there are topics from beginner to advanced…

Initially i thought of taking live training for GCFA or GCFE but i do have some experience on windows systems development with background on C/C++,API,WinDbg etc. I don't have much forensic experience on windows but i think i can pick up from books and other material so thought that i can get more value out of GASF.

Is taking GASF a good value of my money for SANS since i am paying it from my pocket and not paid by my employer)

Please suggest if attending GASF directly is not a good idea. Also before going to course i would like to refresh on basic mobile forensics from books and other sources so that i won't feel to complicated…

Looking forward for inputs from GASF holders and other SANS FOR 585 attendants.

Thanks


   
Quote
minime2k9
(@minime2k9)
Honorable Member
Joined: 14 years ago
Posts: 481
 

From what I remember of that course, the content is very good.

It is a step above the training you would get doing UFED or XRY courses in that it helps you with things mobile phone tools do not extract and how to do manual data analysis.

It is a perfect course for someone who has little experience with mobile phone examinations but wants to learn about analysis more than extractions.

For those who have been doing phone examinations for some time and are used to delving into SQLite databases, it may feel a bit basic.


   
ReplyQuote
(@merriora)
Eminent Member
Joined: 12 years ago
Posts: 44
 

I also took the Advanced Cellphone Forensics course with Heather M.

It was a really good course with lots of great information. It was the first course that really showed me WHY you can't trust a single forensic software suite as the instructor does a good job of showing how each application (cellebrite, oxygen, etc. ) carve and organize data and then what can be found with manual searching.

It is a long 6 days, so be prepared to work hard all the way through, but well worth the effort.
I'm not sure about the GASF certification as I never went for it, but the course is good.


   
ReplyQuote
(@sureng)
New Member
Joined: 12 years ago
Posts: 4
Topic starter  

Thanks @minime2k9 and @Merriora. I just wanted to make sure it is not too advanced course for beginners)


   
ReplyQuote
Share: