Courses & Training

I create various trainings that are unique in DFIR.  There are plenty of technical offerings by plenty of providers. My intention is to provide something different, but also relevant and practical. 

Insofar as technical trainings, I’ve developed and taught different aspects of Windows forensics, but there are so many providers of these things that I focus on other things, like an investigative mindset, or putting any type of case together, or merging the digital investigation with the physical world. I tend to focus on the practitioner at a practical level to solve cases by identifying the offender through whatever legal means are available. DFIR is just one of those means.

Occasionally I will open up spots for https://www.suspectbehindthekeyboard.com/ to access an internal forum dedicated to its name (ie: Placing a suspect behind the keyboard) along with specific trainings and case studies supporting this concept of a suspect-centered approach.