Network Security 2014: FOR408 Work Study
Hey all,
I received word a couple days ago that I have been accepted to facilitate the FOR408 course: Windows Forensic Analysis. Fee + SIFT kit is $1,235. Network Security 2014 takes place in Las Vegas, so it should be a nice excuse to have some fun the following weekend. Today I submitted a request to my employer to have the fee paid, I'll use this thread to post updates and later on my experience of the conference and coursework.
This is exactly the course I wanted, so I'm pretty stoked. The course will fill large gaps I have regarding the Windows environment and digging into malicious artifacts during Incident Response.
I received word a couple days ago that I have been accepted to facilitate the FOR408 course: Windows Forensic Analysis. Fee + SIFT kit is $1,235. Network Security 2014 takes place in Las Vegas, so it should be a nice excuse to have some fun the following weekend. Today I submitted a request to my employer to have the fee paid, I'll use this thread to post updates and later on my experience of the conference and coursework.
This is exactly the course I wanted, so I'm pretty stoked. The course will fill large gaps I have regarding the Windows environment and digging into malicious artifacts during Incident Response.
Comments
I just learned about the work study program, I'm very excited for you! I was wondering today how well they will balance the "work" and the "study" considering you are there to learn.
Agree 100%
http://adarsh.amazonwebservices.ninja
Currently Working On: Python, OSCP Prep
Next Up: OSCP
Studying: Code Academy (Python), Bash Scripting, Virtual Hacking Lab Coursework
I always take a decent amount of time to write my answers out in a text editor first. The site only gives you 15 minutes to complete the application, and I don't want to feel rushed. IMO, it is important to take the time to write a really good answer to the question: "why do you want to volunteer with SANS?"
I don't like straying too far from home when it comes to Work Study - So typically I will look at the yearly schedule and have my eyes on a few conferences. I'm in Phoenix so I usually look for the Phoenix conference, Vegas, and Southern California. At one point I was living in Michigan and was able to make the one in Chicago happen.
Anyway, because I have my eye on a few conferences early on, I'm always checking to see if my conference of choice has been added to the Work Study application drop-down menu. In the case of Las Vegas, I'm pretty sure I applied the very day they added it to the WS page. Just make sure you can be patient - I applied months ago, and just heard back this week.
My understanding of their preferences:
1. SANS Master's students take first priority
2. Those with Work Study experience
3. New blood
It is important to note that SANS always makes sure to have some new people in the mix, so it's not like experienced SANS facilitators are chosen every single time.
I'm sure it does, but it's likely not that stringent - When I received Work Study acceptance for SEC401 I was working Desktop Support and did not have much experience beyond that.
One last thing to add: Even if you don't get the course you want, or if it's a course outside of your interests, my advice is to work the event anyway. Ultimately having a relationship with SANS will work out in the end. That being said, they do an excellent job of lining Work Study participants up with the courses they want to attend.
Currently Working On: Python, OSCP Prep
Next Up: OSCP
Studying: Code Academy (Python), Bash Scripting, Virtual Hacking Lab Coursework
Masters of Information Systems Management with Enterprise Information Security - Walden University
Masters of Science in Information Assurance - Western Governors University
Masters of Science Cyber Security/Digital Forensics - University of South Florida
...I then said "screw it", and bet $100 on 'black' and $100 on 'even', simultaneously. Won. I am now even, minus the dealer tip. Help...
Seriously though, Las Vegas is far too distracting. It has mastered the art of taking my money. I shall post an actual SANS WS update in the morning - my first day reporting in.
Sunday, day 0: This is the largest conference I've facilitated for, and the setup was pretty rough. We also registered Students and handed out materials that night. It was by far the longest day 0 I've had with SANS - I didn't get back to my hotel until 8p
Monday - I ended up missing the first hour of class because we needed to help finish the remaining registrations. I also had to Facilitate for a lunch-and-learn, which required me to be there 30 minutes in advance. More missed class time.
Tuesday - Yet another lunch-and-learn, another 30 minutes of class missed. Additionally I had to Facilitate for a SANS at night vendor event, so I left my FOR408 course 30 minutes early.
Wednesday - No lunch-and-learn, no night event. I'm looking forward to a full day to digest the material.
Because this is a larger event, I have missed a lot more class time. It's still worth it, but it's much more demanding of my time than previous Work Study experiences.
Masters of Information Systems Management with Enterprise Information Security - Walden University
Masters of Science in Information Assurance - Western Governors University
Masters of Science Cyber Security/Digital Forensics - University of South Florida
I did both Cyberguypr, I'd prefer the smaller events because you get more class time.
Masters of Information Systems Management with Enterprise Information Security - Walden University
Masters of Science in Information Assurance - Western Governors University
Masters of Science Cyber Security/Digital Forensics - University of South Florida
Sorry for the late response - I left Vegas late Saturday night, and began working early Sunday morning. It's been 'go go go' since then.
The benefit I see to larger conferences is the larger variety of courses available; and the added likelihood of being selected for Work Study. Other than that, it was pretty grueling, IMO.
The setup and breakdown was much more work, and I missed class time twice a day, four out of the six days. In a smaller conference environment I might have one or two lunch-and-learns/nighttime events to help out with. In the case of Las Vegas, I worked five - all but one was a vendor/sales event. Bleh. It was especially unfortunate for the FOR408 course simply because there was so much material that I was inexperienced with. SANS anticipates this however; as you know we get the On-Demand material for four months.
In the end, it's always an honor to work with SANS and the training is simply the best. Yes, Work Study at a larger conference is still worth it; however because I am now in the position to get SANS training as a Student via my employer, I would likely only Facilitate a large event if it was a course I was dying to take. It worked out in this case, because 408 was at the top of my list.