Just Attended FOR508, after thoughts
I had just finished my 6 days course for FOR508. I think the course is really very valuable for anyone who is interested in incident response. One of the main highlight of the course is that you would get to several hands on practical on a few real machines memory and drives. I believe that is the biggest take away for me and makes me really feel hopeful for my GSE in the future.
Unless you are working in incident response field, other fields of security are not going to get the opportunity to work such a breach. Hence I really recommend for anyone who is interested in working on compromise machine to uncovered how a breach occurs to go for FOR508.
I have also met a few Security Personnel, one of them even said he read my post; and he had the same first name as me.
The course is pretty solid, I think the only weak section is taking effective notes, which I had posted additional thoughts on my blog here: Random Work of a Blue Team Analyst: Effective Note Taking
Unless you are working in incident response field, other fields of security are not going to get the opportunity to work such a breach. Hence I really recommend for anyone who is interested in working on compromise machine to uncovered how a breach occurs to go for FOR508.
I have also met a few Security Personnel, one of them even said he read my post; and he had the same first name as me.
The course is pretty solid, I think the only weak section is taking effective notes, which I had posted additional thoughts on my blog here: Random Work of a Blue Team Analyst: Effective Note Taking
Comments
-
EngRob
Member Posts: 247 ■■■□□□□□□□
Think your link should be Effective Note Taking ~ Welcome to Gravity Sec! -
LionelTeo Member Posts: 526 ■■■■■■■□□□
Yes, i updated my blog two days ago. I am thinking of expanding it and putting up resources and repeated advise for GIAC certs so I can just point people to there in the future. Thank you for point this out.