SANS FOR508

FOR508: Advanced Incident Response, Threat Hunting, and Digital Forensics

FOR508 [ PDF= 2020/2019 Video = 2019 USB = 2019 ]

PDF Version 2020 Added, Workbook not available in 2019 version but in 2020 Workbook available too

Threat hunting and Incident response tactics and procedures have evolved rapidly over the past several years. Your team can no longer afford to use antiquated incident response and threat hunting techniques that fail to properly identify compromised systems. The key is to constantly look for attacks that get past security systems, and to catch intrusions in progress, rather than after attackers have completed their objectives and done worse damage to the organization. For the incident responder, this process is known as “threat hunting” . FOR508 teaches advanced skills to hunt, identify, counter, and recover from a wide range of threats within enterprise networks, including APT nation-state adversaries, organized crime syndicates, and hactivists.

Syllabus FOR508

FOR508.1: Advanced Incident Response & Threat Hunting

FOR508.2: Intrusion Analysis

FOR508.3: Memory Forensics in Incident Response & Threat Hunting

FOR508.4: Timeline Analysis

FOR508.5: Incident Response & Hunting Across the Enterprise | Advanced Adversary & Anti-Forensics Detection

FOR508.6: The APT Threat Group Incident Response Challenge