Kevin Ripa
Senior InstructorPresident at The Grayson Group of Companies
Specialities
Digital Forensics and Incident Response, Cyber Defense
SEC504: Hacker Tools, Techniques, and Incident Handling
SEC504Offensive Operations
FOR589: Cybercrime Investigations
FOR589Digital Forensics and Incident Response
- 5 Days (Instructor-Led)
- 30 CPEs / 30 Hours (Self-Paced)
- Labs: 20 Hours of hands-on instruction
FOR578: Cyber Threat Intelligence
FOR578Digital Forensics and Incident Response
- GIAC Cyber Threat Intelligence (GCTI)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 20 Hours of hands-on instruction
FOR498: Digital Acquisition and Rapid Triage
FOR498Digital Forensics and Incident Response
- GIAC Battlefield Forensics and Acquisition (GBFA)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 20 Hours of hands-on instruction
Virtual Events
Explore content featuring this instructor’s insights and expertise.
- Slide 1 of 5
SANS Dubai Community Night - Data Recovery (beyond the software)
Data recovery is probably one of the most misunderstood technologies in the computer world. Myths abound about how to recover data, with freezing your hard drive being a very common one of these myths. This presentation will get down to the nuts and bolts of data recovery, including the actual internal workings of the drive, what to do when a drive motor fails, when read/write heads fail, and when programming turns the hard drive into a brick. This is presented in layman’s terms so it is very easy to understand. We will be showcasing the best software to use for easier recoveries, as well as live demonstrations of some of our lab equipment for advanced data recovery! We will be discussing rotational media (spinning hard drives), SSD hard drive recovery, thumb drives, cellular, and monolith recovery. By the end of this lecture, you will be much more knowledgeable on how hard drives work, how data lives, and how to recover it when all seems lost.
WebinarDigital Forensics and Incident Response
- 1 Mar 2023
- 18:30 GST
- Kevin Ripa
- Slide 2 of 5
A Journey into the Fields of Digital Forensics and Incident Response with Julia Gately
"Where do I begin?". We will delve into the route taken by veterans and those new to the field alike to try to answer this question. In this webcast, learn about Julia Gately's journey into this exciting career.
WebinarDigital Forensics and Incident Response
- 12 Apr 2023
- 20:00 UTC
- Kevin Ripa
- Slide 3 of 5
SANS Security West 2023 - Keynote: Thinking DFIRently: From Entry to Specialty
The Digital Forensics and Incident Response world. An incredibly broad sphere. We have people trying to get into this world. We have people that have just entered this world. We have people that work day-to-day in this world. We have people that excel in niche areas of this world. Each group thinks they are unique in this world, but actually, one commonality that pervades everyone and everywhere in this world is that we have questions about, “How do I?”.How do I get into DFIR? How do I get better at DFIR? How do I specialize? How do I decide what to specialize in next? How do I get to be like ‘that’ person?Besides these questions, there are more practical questions. What training do I take? What tools do I use? Who should I follow? How can I find a mentor? Why would anyone want to give up their time to help me?Things are changing faster in DFIR than ever before. Questions are everywhere. Let’s walk through the world of DFIR from beginning to end together. Where did you come from? Where do you go? How can you know what is in between? We don’t profess to know all the answers, but I can assure you we all feel the same way, and we are all on this crazy ride together. So let’s get to know each other and the playing field. The theme? You be you and be comfortable in your skin. It is going to be a fun hour and a half!
WebinarDigital Forensics and Incident Response
- 15 May 2023
- 21:00 UTC
- Kevin Ripa
- Slide 4 of 5
DFIR Fu
What are we doing wrong and how can we fix it? What happens when badness happens before we could fix things? Where is my data? What is important from a DFIR perspective?
WebinarDigital Forensics and Incident Response- 16 Oct 2023
- 17:30 AST
- Kevin Ripa
- Slide 5 of 5
Community Night Cyber Defence Singapore August 28th
Fighting the Impossible: Supply Chain Attacks with Bojan Zdrnja, SANS Certified Instructor and DFIR Kung Fu with Kevin Ripa, SANS Senior Instructor
WebinarDigital Forensics and Incident Response
- 28 Aug 2024
- 18:30 UTC
- Bojan Zdrnja & Kevin Ripa