DFIR Hunt Evil Poster

Description

DFIR “Hunt Evil” Poster

This poster focuses on what’s normal on a Windows host helps cut through the noise to quickly locate potential malware. Use the information on the first side as a reference to know what’s normal in Windows and to focus your attention on the outliers.

Created by FOR500 Windows Forensics Analysis | FOR508 Advanced Digital Forensics, Incident Response & Threat Hunting course author and SANS DFIR Curriculum Lead, Rob Lee and Certified Instructor Mike Pilkington with support from the SANS DFIR Faculty.

The DFIR posters are shipped rolled in a tube and measure 24″ x 36″ (slightly larger than the SANS folded version).

Currently shipping within the US only.