SANS teaches the latest tools and techniques available. In addition, our aim is to create a laptop setup that is simple to use to accomplish the daily exercises utilizing forensic tools and scripts we deem most helpful in smartphone investigations. The media files include a preconfigured VMware Forensic Workstation, which is ready to tackle forensics as soon as your tools are licensed.

The tools may prompt you for updates, since updates are released far more frequently than we can create course media files. We know the versions in your FOR585 VM function as expected. If you choose to update, you may find that your lab results differ from the course workbook.  These results may not be beneficial, as the tools sometimes lose capabilities once upgraded. On the flipside, the tools may parse additional information that was previously missed. The choice is yours, but we recommend you update any tool you wish after class as homework.

If you are having issues with Lab 0, refer to the end of the lab for troubleshooting tips. Alert your instructor, TA, or SANS Online SME immediately if your issue is not listed in the Lab 0 troubleshooting steps.