Computer Forensics & Incident Response for Investigators

Trustwave SpiderLabs | August 2-5


On This Page


Overview

Computer Forensics & Incident Response for Investigators is a four day, instructor led course delivered by experienced investigators who have taught corporate incident response teams and law enforcement agencies globally. Anyone who wishes to learn computer forensics and incident response tool and methodologies, and are actively involved in forensics investigations will benefit for this course.

After completing this unclassified course, you will possess the skills necessary to successfully conduct a data breach investigation that adheres to a formal methodology, which will greatly increase the probability of the admissibility evidence in a court of law and ultimately increases the chances of apprehending the intruder.

You will engage in hands on labs and instructor led demos of core competencies in a “real world" environment. The real world environment is made possible through the use of Virtual Machines (VMs). Each VM is pre-configured to mimic different Operating Systems (OSs), network environments and intrusion issues.

While formal prerequisites are not required, exposure to basic computer and networking fundamentals, experience working within the Microsoft Windows family of operating systems, and familiarity with basic computer security terms and concepts will assist you.


Who Should Take This Course

Incident Responders, Digital Forensicators, Anyone interested in learning more about digital forensics and incident response.


Student Requirements

None, although previous forensics experience/knowledge will be useful.


What Students Should Bring

Students must furnish their own laptop running a version of Microsoft Windows. VMware Workstation or Server will also be required in order to participate in the hands--‐on labs. Laptops should have at least 20GB of free space.


What Students Will Be Provided With

• Training Manua
• Tools Disk


Trainers

Chris Hague - SpiderLabs Americas - Senior Security Consultant
Mr. Hague is currently a Senior Forensic Investigator within Trustwave's SpiderLabs - the advanced security team focused on penetration testing, incident response, and application security. Mr. Hague has over 20 years of experience as an IT professional and possesses a wide range of skills that enable him to perform in multiple roles while covering diverse platforms and security initiatives. Mr. Hague is currently responsible for conducting forensic investigations and data recovery efforts across a wide client base. Mr. Hague has responded to numerous large scale targeted based breaches across the world. Mr. Hague has also been the principal investigator on several high profile data breaches which spanned across multiple countries over the last several years.

Prior to Trustwave, Mr. Hague was the Incident Response & Forensics Practice lead for a large US telecommunication company and the Director of Incident Response for DC based firm. Mr. Hague’s broad experience allows him to provide insight critical to designing, maintaining, and troubleshooting secure systems. Mr. Hague has worked as a Trusted Advisor with a global financial institution on the implementation and integration of a Security Operations Center (SOC) Log Management Solution (LMS) with Managed Security Providers (MSP’s). Mr. Hague has performed as the client engagement manager on several large Security and Privacy services projects such as Ethical Hacking and Enterprise Security Assessments. Mr. Hague has developed and demonstrated the ability to lead diverse teams of consultants, peers, experienced hires, and engagement participants from other organizations. Mr. Hague has been responsible for engagements involving multi-functional, international, and cross-organizational teams.

Mr. Hague holds a wide range of professional certifications including: SANS GIAC Certified Forensic Analyst (GCFA), Certified Ethical Hacker (CEH), Certified Penetration Tester Information Assurance Certification Review Board (IACRB) (CPT), Qualified Security Assessor (QSA) and the Computer Hacking Forensic Investigator (CHFI). Mr. Hague is an active member of several joint Government sponsored organizations including the Miami Electronic Crimes Task Force (MECTF) and the High Technology Crime Investigators Association (HTCIA). Mr. Hague is currently in the process of completing his Bachelors of Science in Information Technology with an emphasis on Information Security from Bridgewater State College.