Register by tomorrow to save $200 on top-notch cyber security training at SANS Santa Monica 2019!

DFIR Summit & Training 2019

Austin, TX | Thu, Jul 25, 2019 - Thu, Aug 1, 2019
This event is over,
but there are more training opportunities.

An Update on the Current State of Windows Forensics

  • David Cowen
  • Saturday, July 27th, 6:30pm - 8:30pm

Join us for a tour of all of whats new this year in windows forensics. As things keep changing and knew facts come to life examiners can easily fall behind. In this keynote David Cowen will share a summary of all his new research for 2018 and 2019 to get you up to speed with what you need to know.


Bonus Sessions

The following bonus sessions are open to all paid attendees at no additional cost. There are many different types of events that fall into these categories:

  • SANS@Night: Evening presentations given after day courses have ended. This category includes Keynotes.
  • Special Events: SANS-hosted events and other non-technical recreational offerings. This category includes, but is not limited to, Receptions and Information Tables.
  • Vendor: Events hosted by external vendor exhibitors.
  • Lunch & Learn: Short presentations given during the lunch break.
Thursday, July 25
Session Speaker Time Type
Vendor Showcase Thursday, July 25th, 10:00am - 10:30am Vendor Event
After the Attack: Automate and Accelerate Your Post-Breach Response Shon Harris, Senior Cloud Engineer Thursday, July 25th, 12:00pm - 1:20pm Lunch and Learn
Domain & DNS-based Adversarial Threat Intelligence in the SOC/CSIRT Corin Imai, Senior Security Advisor Thursday, July 25th, 12:00pm - 1:20pm Lunch and Learn
Incident Response and Investigation using Shadow Search - A Real World Example James Morin, Threat Intelligence Manager Thursday, July 25th, 12:00pm - 1:20pm Lunch and Learn
Chopping Down a Dense forest of Teleme-Trees: Making Telemetry Work for You Justin Ibarra, Security Researcher Thursday, July 25th, 12:00pm - 1:20pm Lunch and Learn
Vendor Showcase Thursday, July 25th, 3:15pm - 3:45pm Vendor Event
DFIR Summit Night Out in ATX! Thursday, July 25th, 7:00pm - 9:00pm Special Events
Friday, July 26
Session Speaker Time Type
Vendor Showcase Friday, July 26th, 9:45am - 10:15am Vendor Event
Vendor Showcase Friday, July 26th, 12:00pm - 1:15pm Vendor Event
Vendor Showcase Friday, July 26th, 2:50pm - 3:20pm Vendor Event
Saturday, July 27
Session Speaker Time Type
Enterprise DFIR with EnCase - Uncovering the Metaphorical Devil in the Details Jeff Hedlesky, Forensic Evangelist, OpenText & JJ Cranford, Sr. Product Mkting Mgr, OpenText Saturday, July 27th, 12:30pm - 1:15pm Lunch and Learn
Security Orchestration and Automation to respond to Insider Threats John Avendano, Technical Consultant Saturday, July 27th, 12:30pm - 1:15pm Lunch and Learn
An Update on the Current State of Windows Forensics David Cowen Saturday, July 27th, 6:30pm - 8:30pm Keynote
Sunday, July 28
Session Speaker Time Type
Come to the Dark Side: Python's Sinister Secrets Mark Baggett Sunday, July 28th, 6:30pm - 7:30pm SANS@Night
KAPE: What‚s all the buzz about? Mark Hallman Sunday, July 28th, 7:30pm - 8:30pm SANS@Night
Monday, July 29
Session Speaker Time Type
Piecing the Digital Story Together Using Magnet AXIOM Tarah Melton, Forensic Consultant Monday, July 29th, 12:30pm - 1:15pm Lunch and Learn
DFIR Community Night Monday, July 29th, 6:00pm - 8:00pm Special Events