The Great Browser Schism: How to Analyze IE10 & IE11
- Chad Tilbury, Certified Instructor, SANS Institute & Technical Director, CrowdStrike
- Thursday, June 5th, 5:45pm - 6:45pm
Changes to Internet Explorer have been slowly occurring since Windows 7, but the introduction of IE10 with Windows 8 and IE11 with Windows 8.1 has been nothing short of cataclysmic. Take everything you knew about Internet Explorer and file it away, because it won't help you now. This talk will cover Internet Explorer 10 & 11 artifact by artifact, giving you the tools and techniques necessary to do a full analysis. Learn to parse the ESE database, where your Index.dat files have gone, and how the introduction of Windows 8 metro apps tie Internet Explorer more deeply to the OS than ever.
Chad Tilbury has been responding to computer intrusions and conducting forensic investigations since 1998. His extensive law enforcement and international experience stems from working with a broad cross-section of Fortune 500 corporations and government agencies around the world. During service as a Special Agent with the Air Force Office of Special Investigations, he investigated and conducted computer forensics for a variety of crimes, including hacking, abduction, espionage, identity theft, and multi-million dollar fraud cases. He has led international forensic teams and conducted computer incident response at some of the largest organizations in the world. Chad is a graduate of the U.S. Air Force Academy and holds a B.S. and M.S. in Computer Science and GCFA, GREM, ENCE, and CISSP certifications. In addition to serving as faculty at the SANS Institute, he is currently a consultant specializing in incident response, corporate espionage, and computer forensics.
The following bonus sessions are open to all paid attendees at no additional cost. There are many different types of events that fall into these categories:
- SANS@Night: Evening presentations given after day courses have ended. This category includes Keynotes.
- Vendor: Events hosted by external vendor exhibitors.
- Lunch & Learn: Short presentations given during the lunch break.