Cross compatibility between Linux and Windows.Auto-DFIR package update and customizations.Key new SIFT Workstation features include: The powerful open source forensic tools in the kit on top of the versatile and stable Linux operating system make for quick access to most everything I need to conduct a thorough analysis of a computer system," said Ken Pryor, GCFA, who has run countless cases supporting a variety of forensic and incident response priorities. "The SIFT Workstation has quickly become my ‘go to’ tool when conducting an exam. "At no cost, there is no reason it should not be part of the portfolio in every organization that has skilled incident responders." "Even if SIFT were to cost tens of thousands of dollars, it would still be a very competitive product," says Alan Paller, director of research at SANS. Enterprise-Class Incident Response course (FOR608 - set to debut in 2021).Advanced Network Forensics course (FOR572).Advanced Incident Response course (FOR508).Offered as an open source and free project, the SIFT Workstation is used in the following incident response courses at SANS:
With over 125,000 downloads to date, the SIFT Workstation continues to be one of the most popular open-source incident-response and digital forensic offerings available. Over the years, he and a small team have continually updated the SIFT Workstation for use in class, as well as for the wider community as a public resource.
Rob Lee created the original SIFT Workstation in 2007 to support forensic analysis in the SANS FOR508 class.
0 kommentar(er)
