r/computerforensics • u/YesterdayFormal7337 • 9d ago
Free resources for FOR500
Hi al i wanna study FOR500 specially windows DFIR and i wanna a free resources not a stolen resources
1
u/BitForBit_DFIR 5d ago
FOR500 is pricey, so squeezing everything free around it is the right move. SANS puts out a bunch of DFIR posters and cheat sheets as free PDFs that cover the Windows artifacts the course leans on: the Hunt Evil, Windows Forensic Analysis, and Memory Forensics posters are worth grabbing first. For hands-on, Eric Zimmerman's toolset plus KAPE is free and maps well onto the artifact-heavy parts of FOR500, and CyberDefenders has free labs in the same space. 13cubed's YouTube channel also covers Windows internals in a way that complements the FOR500 material nicely. None of this replaces the course itself, but it'll get you fluent in the artifacts before you spend the money.
1
1
u/Mall_8220 1d ago
heck Eric Zimmerman's tools and DFIR posters for FOR500 study. Even pros like hodson pi lean on those open-source windows artifacts during digital forensics work.
5
u/Wazanator_ 8d ago
Look up 13 Cubed and watch all of his stuff on Windows forensics. That is the best free material you will find.
That said FOR500 you will absolutely need to take the course and buy the books. SANS will let you take the test without the course but it will be extremely difficult as questions are written with the idea that you will refer to your index and look them up in your books. I have seen questions show up that are brief mentions that without an index I would not have found.