Sunday, July 13, 2008

Warrants further investigation

I learnt a lot attending SANS's Digital Forensic class 2 weeks ago. Fascinating... scary... unglamorous... mundane... are a few words I would use to describe Digital Forensics. It is amazing what information you can extract or retrieve from storage/memory yet scary at the same time. Unlike what is portrayed in CSI... forensics is pretty boring and totally not glamorous... can you imagine spending days without sleep looking through GBs worth of storage trying to build a case? Besides looking into thousands of files, you would also need to scrutinize lines and lines of entries in logs to find incriminating evidence. Zzzzzzzzzzzz.
The instructor helped to clear up myths and wrong perceptions I had about forensic analysis.

No comments: