The 2010 European Digital Forensics and Incident Response Summit

Dates:

Pre-Summit Course Dates: April 14 - 18, 2010

Summit Dates: April 19 - 20, 2010

Summit Venue:

Millennium Gloucester Hotel & Conference Centre London
4 - 18 Harrington Gardens
London, GB
Phone: +44 (0) 20 7373 6030
Fax: +44 (0) 20 7373 0409
Web site: www.millenniumhotels.co.uk/millenniumgloucester/

Table of Contents

• Summit Agenda
• Summit Overview
• What is Special About the SANS Incident Response and Digital Forensics Summit in the EU?
• Keynotes and Expert Briefings
• Expanded Keynote and Expert Briefing Information
• Stay Connected for Updates to the Summit
• Register Today

Summit Overview

Everywhere around you, there is a digital storage device within arms reach. We have "Electronic ADD."

On a daily basis, you use digital devices constantly. You have a mobile device where you make phone calls, text message, post on Twitter, and surf the web. You use a computer to read email, pay bills, order groceries, and even watch TV. You probably also have one or more of the following devices: GPS, video game system, eReader, MP3 player, digital video recorder, or more.

For better or worse, our lives and our personal/private data are now recorded on these devices moment-by-moment. As a result, crimes, civil litigation cases, and incidents exploiting your stored data found on these devices are increasing.

The need for digital forensic professionals to analyze these devices is increasing due to the sheer number of incidents and cases that every organization faces. Incidents such as TJX, Heartland, and Hannaford, are routinely in the news. Security data breach costs are in the millions of dollars. Being able to effectively respond, investigate, and eventually answer difficult questions is crucial. In addition, civil law suits are seeing an increase in utilization of electronically stored evidence. For criminal cases, it is becoming the norm to collect the subject or victim's cell phone, computer, and other electronic devices in order to help solve the crime.

Organizations need to trust that they are hiring qualified professionals to solve these challenges.

In Spring 2010, the SANS Digital Forensics and Incident Response Summit has its European debut in London to discuss the latest trends and hear from industry experts. More specific details will be forthcoming. If you would like to be considered to speak at this inaugural European event, please email rlee@sans.org to discuss some options and submit your topic.

Check out some of the presentations from the 2009 US Forensics Summit

• 2009 US Forensics Summit Presentations

What Is Special About This SANS Incident Response and Digital Forensics Summit in the EU?

1. The speakers. There is a lot of talent in the EU which is often not sufficiently exposed because they don't have the chance to travel all the way to the US. Similarly the vast majority of the Forensics Community cannot afford to travel there. With this Summit we want to create an opportunity for the EU forensic community to meet the local experts and learn from their invaluable knowledge and experience.
2. You, the Community. We want to create an opportunity to share experiences with your colleagues from other Law Enforcement or Military Agencies, Corporations, Financial Companies, Telcos, etc. You can exchange ideas on how to approach and solve some of the most excruciating problems today: short budgets, transnational investigations, legislation, malware, fraud, etc.
3. Localization. Even when similar problems,solutions, tools and techniques are used all around the world, in the SANS Incident Response and Forensics Summit EU we want to define EU-specific problems and together find solutions to them.
4. We don't want to forget that the EU receives multiple visitors from all over Africa, Middle East and Asia. We also want to welcome them to this Summit, as they all have similar problems to the ones we have.
5. We want the SANS Forensics Summit EU to be your favorite event of the year, the forum in which the top experts in the EU and nearby regions, the Vendors and the Community will have the chance to meet and shareknowledge, experience and solutions, and we will work hard to make that happen.

This is a unique opportunity you shouldn't let pass. Register now for the SANS Incident Response & Digital Forensics Summit EU 2010.

Keynotes and Expert Briefings

Keynote Day 1

Jesse Kornblum - Senior Forensic Scientist, ManTech International Corporation
Keynote Title: Similarity: Fuzzy Hashing and Beyond

Keynote Day 2

Keith Foggon - Manager, Digital Evidence Team, UK Financial Services Authority
Keynote Title: Digital Forensics Trends and Techniques

Malware Analysis Briefing

Ero Carrera - Chief Research Officer, VirusTotal
Title: Advanced malware analysis

New Digital Forensic Techniques Briefings

Lee Whitfield - Forensic Lab Manager, Zentek Forensics
Title: Into The Shadows

Andreas Schuster
Title: Understanding Windows Event Log and the EVTX file format

Incident Response Trends Briefing

Jelle Niemantsverdriet - Principal Consultant, Verizon Business Security Solutions
Title: 2009-2010 Verizon Business Data Breach report: How did they get in?

Digital Forensic Tool Briefings

Kristinn Gudjonsson - Team Leader of Information Security, Skyggnir
Title: Mastering the Super Timeline log2timeline style

Matthieu Suiche
Title: Microsoft Blue Screen of the Death is Dead

Robert-Jan Mora and Bas Kloet
Title: Advanced File Carving

Websites To Stay Connected To The Latest Summit Updates

• The SANS Computer Forensics Website
  This website is the portal into the community, we have over 300 white papers, website links, downloads for free tools, and a link to the SANS Forensic Blog.
• The SANS Computer Forensics Blog
• SANS Forensics Twitter Feed @sansforensics
• Computer Forensics Community Page
  This site includes links to over 50 different digital forensic blogs/community sites - it is separated by Computer Forensic Blogs, E-Discovery Blogs, and Computer Forensic Podcasts.

Pre-Summit Training

Forensics 408: Computer Forensic Essentials

SANS Security 408: Computer Forensic Essentials focuses on the essentials that a forensic investigator must know to investigate core computer crime incidents successfully. You will learn how computer forensic analysts focus on collecting and analyzing data from computer systems to track user-based activity that could be used internally or in civil/criminal litigation. This course covers the fundamental steps of the in-depth computer forensic methodology so that each student will have the complete qualifications to work as a computer forensic investigator in the field helping solve and fight crime.

For more information or to register for this course CLICK HERE.