I am actually updating my blog. Not because I want to, but because I am avoiding studying for my GCFA exam (http://www.giac.org/certifications/security/gcfa.php) this Tuesday. I have found the coursework for the GCFA to be very rigorous. I took the class via SANS on Demand (http://www.sans.org/ondemand/). I am glad I did because if you have taken a SANS class you know how much information they throw at you. I have reviewed the material multiples times and pick up some detail I missed every time. Some new skills I have learned are imaging machines that are forensically sound, data carving, restoring deleted data, incident response techniques, and some law. I am looking forward to putting together my forensic workstation and master the new skills I have learned. Also, check out the SANS forensics blog at (https://blogs.sans.org/computer-forensics/). I will try to check back in Tuesday. Back to studying.