SEC504: Hacker Tools, Techniques, and Incident Handling
SEC504Offensive Operations
Copy of EZ Tools For TESTING
Last updated: 17 Jun, 2025
Created by
Eric Zimmerman
Internal link and external link. These open source digital forensics tools can be used in a wide variety of investigations including cross validation of tools, providing insight into technical details not exposed by other tools, and more. Over the years, Eric has written and continually improve over a dozen digital forensics tools that investigators all over the world use and rely upon daily.
Author
Eric Zimmerman
Principal InstructorEric has redefined digital forensics with open-source tools like KAPE, now global standards for cybercrime investigations. He has directly enabled faster evidence analysis, rescued exploited children, and set new benchmarks in forensic response.
Read more about Eric ZimmermanRelated Resources
Related Courses
- Slide 1 of 16
SEC402: Cybersecurity Writing: Hack the Reader
Essentials SEC402Digital Forensics and Incident Response
- 12 CPEs / 12 Hours (Self-Paced)
- Slide 2 of 16
FOR589: Cybercrime Investigations
Major UpdatesIntermediate FOR589Digital Forensics and Incident Response
- 5 Days (Instructor-Led)
- 30 CPEs / 30 Hours (Self-Paced)
- Labs: 20 Hours of hands-on instruction
- Slide 3 of 16
FOR585: Smartphone Forensic Analysis In-Depth
Major UpdatesEssentials FOR585Digital Forensics and Incident Response
- GIAC Advanced Smartphone Forensics (GASF)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 22 Hours of hands-on instruction
- Slide 4 of 16
FOR608: Enterprise-Class Incident Response & Threat Hunting
Intermediate FOR608Digital Forensics and Incident Response
- GIAC Enterprise Incident Responder (GEIR)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 20 Hours of hands-on instruction
- Slide 5 of 16
FOR518: Mac and iOS Forensic Analysis and Incident Response
Intermediate FOR518Digital Forensics and Incident Response
- GIAC iOS and macOS Examiner (GIME)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 23 Hours of hands-on instruction
- Slide 6 of 16
FOR508: Advanced Incident Response, Threat Hunting, and Digital Forensics
Intermediate FOR508Digital Forensics and Incident Response
- GIAC Certified Forensic Analyst (GCFA)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 35 Hours of hands-on instruction
- Slide 7 of 16
FOR610: Reverse-Engineering Malware: Malware Analysis Tools and Techniques
Advanced FOR610Digital Forensics and Incident Response
- GIAC Reverse Engineering Malware (GREM)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 48 Hours of hands-on instruction
- Slide 8 of 16
FOR578: Cyber Threat Intelligence
Intermediate FOR578Digital Forensics and Incident Response
- GIAC Cyber Threat Intelligence (GCTI)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 20 Hours of hands-on instruction
- Slide 9 of 16
FOR509: Enterprise Cloud Forensics and Incident Response
Intermediate FOR509Digital Forensics and Incident Response
- GIAC Cloud Forensics Responder (GCFR)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 20 Hours of hands-on instruction
- Slide 10 of 16
FOR528: Ransomware and Cyber Extortion
Intermediate FOR528Digital Forensics and Incident Response- 4 Days (Instructor-Led)
- 24 CPEs / 24 Hours (Self-Paced)
- Labs: 13 Hours of hands-on instruction
- Slide 11 of 16
FOR577: LINUX Incident Response and Threat Hunting
newIntermediate FOR577Digital Forensics and Incident Response
- GIAC Linux Incident Responder (GLIR)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 23 Hours of hands-on instruction
- Slide 12 of 16
FOR710: Reverse-Engineering Malware: Advanced Code Analysis
Advanced FOR710Digital Forensics and Incident Response
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 12 Hours of hands-on instruction
- Slide 13 of 16
FOR498: Digital Acquisition and Rapid Triage
Essentials FOR498Digital Forensics and Incident Response
- GIAC Battlefield Forensics and Acquisition (GBFA)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 20 Hours of hands-on instruction
- Slide 14 of 16
SEC403: Secrets to Successful Cybersecurity Presentation
Essentials SEC403Digital Forensics and Incident Response
- 6 CPEs / 6 Hours (Self-Paced)
- Slide 15 of 16
FOR500: Windows Forensic Analysis
Essentials FOR500Digital Forensics and Incident Response- GIAC Certified Forensic Examiner (GCFE)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 22 Hours of hands-on instruction
- Slide 16 of 16
FOR572: Advanced Network Forensics: Threat Hunting, Analysis, and Incident Response
Advanced FOR572Digital Forensics and Incident Response
- GIAC Network Forensic Analyst (GNFA)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 20 Hours of hands-on instruction