👥 We come to sharpen skills, but the true value is in the convos, shared challenges, & the sense we’re in this together.
Ready to forge connections & skills to protect your org? We'll see you in a #FOR589 soon!
✍️ Learn more about FOR589: buff.ly/DDa8ScC#DFIR
Sean O'Connor, Senior Manager #InformationSecurity. With over 15 years of experience across private and public sectors, Sean is a @SANSInstitute author and instructor for the #FOR589: #CybercrimeIntelligence course; frequent conference speaker who is passionate about volunteering and mentoring students and veterans entering cybersecurity.
Full guide🔗bit.ly/feedlyroundup_org
For all UK 🇬🇧 folks working in CTI, @bletchleypark is a must visit!
The intelligence factory was a great reminder of the people and processes involved in this type of work (particularly the intelligence lifecycle).
Easy to relate to modern day cybercrime intelligence! #FOR589
Exciting news! 🚀
Our OnDemand self-paced online version of the @sansforensics#FOR589 Cybercrime Investigations course is now available 🌐
We've made updates to the course, including recording all modules and enhancing the content.
Join us! 🔗 sans.org/cyber-security-cour…
⏰ Make time for training, on YOUR time
FOR589: #Cybercrime Investigations goes live Aug 6 OnDemand.
💰 Use Presale10 at checkout for 10% off
📩 Using a voucher? You might qualify! Contact Voucher-Support@sans.org
Learn more about FOR589: buff.ly/9lFDsWj#DFIR
📆 Busy schedule? No problem.
Train anywhere, anytime with FOR589: #Cybercrime Investigations
💻 Live OnDemand Aug. 6
💸 Save 10% w/ code Presale10
🎟️ Voucher? You may qualify! Ask Voucher-Support@sans.org
Learn more here: buff.ly/9lFDsWj#DFIR#SANSTraining
Exploiting Bitcoin opsec fails continues to be a fruitful tactic to catch cybercrims for LE, which is 100% exactly why we teach it in #FOR589 with our partners @chainalysis
👥 It’s not just about mastering the latest tactics, it’s building community w/ folks who share your mission.
Ready to connect while gaining skills to protect your org? We hope to see you in a FOR589 soon!
✍️ Learn more about FOR589: buff.ly/dwWzq1j#DFIR
If done well, it is a great opportunity for CTI teams to shine and really prove their value to organisations during such incidents related to the cybercrime underground, such as data leak posts, extortion attempts, or access broker sales. 5/5
#CTI#ThreatIntel#Cybercrime#FOR589
It’s becoming so often now that I recommend one of our #FOR589 blogs to other analysts as a resource. It’s definitely one of my favourites to reference when it comes to analysis of cybercrime forum posts and other threat actor claims: sans.org/blog/enhance-your-c…
Pleased to share I was invited on and spoke to the RiskyBiz Podcast about the BlackBasta Leaks with @campuscodi!
🎙️ risky.biz/RBTALKS6/
The leaks represent a great opportunity for cybercrime analysts to understand how these ransomware gangs operate #FOR589@sansforensics
New Blog! BlackBasta Leaks: Lessons from the Ascension Health attack 🏥🔒
— This is a step-by-step extraction and translation of the leaked conversation between the BlackBasta members during the Ascension Health attack
🔗blog.bushidotoken.net/2025/0…
Key Findings 🧵
🔥 Caught in Action: John Doyle conducting his FOR589 workshop at #CTISummit, discussing the complexities of #Cybercrime infrastructure. One of the reasons you should secure your seat at the summit in person 😉
Learn more about FOR589: buff.ly/3POewKG#DFIR#ThreatIntel