DFIR Prague 2014

Prague, Czech Republic | Mon, Sep 29, 2014 - Sat, Oct 11, 2014

The Great Browser Schism: How to Analyze IE10 & IE11

  • Chad Tilbury
  • Tuesday, October 7th, 6:00pm - 7:00pm

Changes to Internet Explorer have been slowly occurring since Windows 7, but the introduction of IE10 with Windows 8 and IE11 with Windows 8.1 has been nothing short of cataclysmic. Take everything you knew about Internet Explorer and file it away, because it won't help you now. This talk will cover Internet Explorer 10 & 11 artifact by artifact, giving you the tools and techniques necessary to do a full analysis. Learn to parse the ESE database, how to investigate Windows Modern App usage, and why the introduction of device synchronization ensures that your computer is spying on you like never before.

Bonus Sessions

The following bonus sessions are open to all paid attendees at no additional cost. There are many different types of events that fall into these categories:

  • SANS@Night: Evening presentations given after day courses have ended. This category includes Keynotes.
Monday, September 29
Session Speaker Time Type
SIFT Workstation & The Art of Incident Response Rob Lee Monday, September 29th, 6:00pm - 7:00pm Keynote
Tuesday, September 30
Session Speaker Time Type
Sushi Grade Smartphone Forensics on a Ramen Noodle Budget Heather Mahalik Tuesday, September 30th, 6:00pm - 7:00pm SANS@Night
Everything They Told Me About Security Was Wrong John Strand Tuesday, September 30th, 7:00pm - 8:00pm SANS@Night
Tuesday, October 7
Session Speaker Time Type
The Great Browser Schism: How to Analyze IE10 & IE11 Chad Tilbury Tuesday, October 7th, 6:00pm - 7:00pm SANS@Night