Kathryn Hedley
Certified InstructorDirector and Digital Forensic Specialist at Khyrenz Ltd.
Specialities
Digital Forensics and Incident Response
Experience SANS training through course previews.
Learn MoreLet us help.
Contact usConnect, learn, and share with other cybersecurity professionals
Engage, challenge, and network with fellow CISOs in this exclusive community of security leaders
Become a member for instant access to our free resources.
Sign UpMission-focused cybersecurity training for government, defense, and education
Explore industry-specific programming and customized training solutions
Sponsor a SANS event or research paper
We're here to help.
Contact UsDigital Forensics and Incident Response
Kathryn is a Director and Digital Forensic Specialist for Khyrenz Ltd., is a SANS Instructor and has served as a forensic technical lead and Subject Matter Expert (SME) working in system assurance and evaluation, research, host-based malware intrusion investigation, forensic acquisition, and investigation for both the public and private sectors. She has led various forensic teams since 2010, spending three years embedded within a cross-organizational team, liaising directly with multiple clients.
Here are upcoming opportunities to train with this expert instructor.
Explore content featuring this instructor’s insights and expertise.
This hands-on series cracks the code on digital evidence. Designed for beginners, you'll unlock the secrets hidden within devices, from understanding data storage to interpreting timestamps. Learn to extract critical evidence, navigate forensic images, and convert between data formats.
Don't be fooled by file extensions! This workshop delves deeper, equipping you to identify a file's true type using file signatures.
Part 3 of 6Don't believe the ‘delete’ button! This workshop equips you with the power of data recovery. We'll delve into allocated and unallocated clusters and file slack, the hidden compartments where deleted data can reside. Through hands-on exercises, you'll learn to identify different scenarios when it comes to deleted data, and recover or carve out files thought to be lost forever.
In this workshop we'll unveil the mysteries behind how data is ordered (big or little endian) and how timestamps are stored and interpreted across different systems and applications. Through interactive exercises, you'll obtain the skills to correctly interpret data, reveal timestamps, and gain a clearer understanding of how time is represented in the digital world.
This hands-on workshop equips you with a key skill in digital forensics: mounting and exploring forensic disk images. Uncover the secrets hidden within digital evidence!
Those bizarre strings of letters and numbers you encounter during investigations? They might just be Base64 in disguise! This in-depth workshop is your chance to crack the code and unlock the secrets of Base64 through hands-on exercises, to learn how data – from text and images to crucial evidence – is encoded and decoded using this format.
A mysterious USB stick has been found in a car park, and it’s up to you to uncover the secrets it holds. Over two nights, participants will dive into the fundamentals of digital forensics, following a step-by-step guided investigation.
A mysterious USB stick has been found in a car park, and it’s up to you to uncover the secrets it holds. Over two nights, participants will dive into the fundamentals of digital forensics, following a step-by-step guided investigation.
Review relevant educational resources made with contribution from this instructor.