CyFIR for the Forensics Explorer - Online Workshop
MONTHLY SERIES | Starting in January 2020

It’s a post breach world.  The key to survival – CyFIR on the AWS Marketplace!

In this monthly video workshops series, you'll learn how to quickly conduct incident response triage and digital investigations on the AWS Marketplace to gain a competitive edge. This series will teach you:

  • CyFIR Investigator Basics - January 7, 2020
  • Searching email - February 4, 2020
  • Recovering Deleted Data - March 3, 2020
  • Using Process Monitoring and Snapshots - April 7, 2020 
  • Using Network Monitoring and Login/Logout monitoring - May 5, 2020
  • Using File Monitoring and Registry Monitoring - June 2, 2020

By eliminating large upfront costs and offering a by-the-hour plan, CyFIR brings a new level of affordability to incident response triage and digital investigations for small and mid-size IR firms and MSSPs.

CyFIR’s “power by the hour” model allows you to rapidly deploy individual, suitably-sized CyFIR servers, giving you the edge you need to compete with larger IR and cyber security organizations. With the ability to purchase your remote forensic analysis platform by the hour, you can not only avoid large up-front costs for additional software licenses, but you can also work the low hourly rates into your client billing.



Ben Cotton, who founded CyTech Services, following a 21-year career in the United States Army Special Forces. As part of his military service, Ben developed the digital sensitive site exploitation, computer network attack (CNA), computer network defense (CND) and computer network operations (CNO) capabilities for the United States Special Operations Command (USSOCOM). CyFIR LLC, was formed in 2018, and Ben’s Special Forces approach to dealing with these kinds of challenges in a military setting is also applied as the CyFIR team deals with the current cyber challenges facing enterprise markets. 


Want try CyFIR before the session? 

Get a FREE 5-Day Trial

*Limited time offer for free 5-day trial on < 250, < 1k, and < 2.5k Agent models.