Facing The New Frontier: A Real Case Study In Performing Computer Forensics Without The Evidence
- Keith Jones, Lead Cybersecurity Engineer
- Tuesday, June 10th, 11:30am - 12:30pm
In most modern investigations the computer forensics expert witness has access to all of the data and is able to develop their opinion based on hard evidence. Times are now changing in computer forensics just as if there is a missing body in a murder trial. Now, experts need to provide testimony to support his or her expert opinions on computer systems he or she did not have to examine. Would such a scenario be considered pure speculation, baseless and unethical for the expert to complete? Mr. Jones was able to convince a judge of his opinions without the actual evidence present. Would you like to find out how it was accomplished within the confines of Federal Civil law? Attend this presentation and learn the techniques.
Bonus Sessions
The following bonus sessions are open to all paid attendees at no additional cost. There are many different types of events that fall into these categories:
- SANS@Night: Evening presentations given after day courses have ended. This category includes Keynotes.
- Vendor: Events hosted by external vendor exhibitors.
- Lunch & Learn: Short presentations given during the lunch break.
Tuesday, June 3
| Session | Speaker | Time | Type |
|---|---|---|---|
| Logs, Logs, Every Where / Nor Any Byte to Grok | Phil Hagen, Instructor, SANS Institute | Tuesday, June 3rd, 6:30pm - 7:30pm | SANS@Night |
Wednesday, June 4
| Session | Speaker | Time | Type |
|---|---|---|---|
| Extracting User Credentials using Memory Forensics | Alissa Torres, Certified Instructor, SANS Institute | Wednesday, June 4th, 5:45pm - 6:45pm | SANS@Night |
| Sushi-grade Smartphone Forensics on a Ramen Noodle Budget | Heather Mahalik, Certified Instructor, SANS Institute | Wednesday, June 4th, 6:45pm - 7:45pm | SANS@Night |
Thursday, June 5
| Session | Speaker | Time | Type |
|---|---|---|---|
| The Great Browser Schism: How to Analyze IE10 & IE11 | Chad Tilbury, Certified Instructor, SANS Institute & Technical Director, CrowdStrike | Thursday, June 5th, 5:45pm - 6:45pm | SANS@Night |
| Filesystem Journal Forensics | David Cowen, Partner, G-C Partners | Thursday, June 5th, 6:45pm - 7:45pm | SANS@Night |
Monday, June 9
| Session | Speaker | Time | Type |
|---|---|---|---|
| Vendor Showcase | — | Monday, June 9th, 9:50am - 10:05am | Vendor Event |
| Dealing With Persistent Smartphone Forensic Challenges | Ronen Engler, Senior Manager, Technology & Innovation | Monday, June 9th, 12:00pm - 1:00pm | Lunch and Learn |
| Vendor Showcase | — | Monday, June 9th, 3:45pm - 4:05pm | Vendor Event |
Tuesday, June 10
| Session | Speaker | Time | Type |
|---|---|---|---|
| Vendor Showcase | — | Tuesday, June 10th, 10:30am - 11:00am | Vendor Event |
| Facing The New Frontier: A Real Case Study In Performing Computer Forensics Without The Evidence | Keith Jones, Lead Cybersecurity Engineer | Tuesday, June 10th, 11:30am - 12:30pm | Lunch and Learn |
| Vendor Showcase | — | Tuesday, June 10th, 3:00pm - 3:20pm | Vendor Event |
