- Summit Dates: June 26 - 27, 2012
- Pre-Summit Course Dates: June 20 - 25, 2012
- Summit Venue:
- Omni Hotel Downtown Austin
- 700 San Jacinto @ 8th Street
- Austin, TX 78701
- Reservations: 1-800-843-6664 reference SANS
Special rate available until May 25
Standard Hotel room
Government per diem rate (proper ID required)
- Phone: (512) 476-3700
- Fax: (512) 397-4888
- Web: Omni Hotel
Forensic 4cast Awards 2012: Voting Now Open!
Voting closes end of day June 17, 2012.
The 5th annual Forensics and Incident Response Summit will again be held in the live musical capital of the world, Austin, Texas. The Summit will focus on high quality and extremely relevant content as well as panel discussions in Digital Forensics and Incident Response. The 2012 theme is currently in development as the digital forensics and incident response community is constantly evolving and our content promises to be cutting-edge and relevant to ensure you will be able to utilize the ideas presented when you return to your organization.
In addition, we encourage you to take every opportunity to make the most of this event from attending the Summit to registering for one or more of the pre-summit training classes taught by SANS' top-rated instructors.
The following skills based courses will be offered June 20-25, 2012.
This class focuses on the critical knowledge of the Windows OS that every digital forensic analyst must know to investigate computer incidents successfully. You will learn how computer forensic analysts focus on collecting and analyzing data from computer systems to track user-based activity that could be used internally or in civil/criminal litigation. If this is your first computer forensics course with SANS we recommend you start here.
Advanced Computer Forensic Analysis and Incident Response will help you start to become a master of advanced incident response and computer forensics tools and techniques to investigate data breach intrusions, tech-savvy rogue employees, the advanced persistent threat, and complex digital forensic cases.
We begin by diving right into covert tunnel analysis, DHCP log examination, and sniffing traffic. By day two, you'll be extracting tunneled flow data from DNS NULL records and extracting evidence from firewall logs. On day three, we analyze Snort captures and the web proxy cache. You'll carve out cached web pages and images from the Squid web proxy. For the last two days, you'll be part of a live hands-on investigation. Working in teams, you'll use network forensics to solve a crime and present your case.
Advisory Council (Click here for full bios on council members)
- Harlan Carvey, DFIR Researcher
- Frederick Chang, PhD, President, 21CT
- Eric Huber, VP, Manager of High Tech Investigations
- Rob Lee, SANS Faculty Fellow
- Detective Cindy Murphy, City of Madison, WI
- Alan Paller, Director of Research, SANS Institute
- Hal Pomeranz, Founder, Deer Run Associates
- Chad Tilbury, SANS Certified Instructor
- Lenny Zeltser, SANS Senior Instructor
This event promises to bring together the leading minds in digital forensics and incident response community. Evening events are being planned to give you the opportunity to enjoy Austin's best. Share a table with your peers, friends and speakers. Rub shoulders with people who do what you do - from a wide cross section of industries, company sizes and experiences. See you in Austin.
I never fail to walk away from these summits with more knowledge and passion for what I do! - Steve Wallace, Lyondell Basell Industries
Hands down the forensic summit is the most field specific conference with the highest quality staff, speaker and attendees. It is a must for forensicators! - Larry Sult, SSPA
Still the best bang for the buck when staying current in DFIR - Mark Hoffman, Digital Discovery
Incredible information to better your forensics/ IR team, picks up where the technical tracks leave off - Jeff Wichman
Harlan Carvey said, it was totally awesome and well worth every second I was there. Carvey's comments can be viewed at Windows Incident Response blog.
Chris Pogue wrote, Being able to hear speakers like Harlan Carvey, Oive Carroll, Richard Bejtlich (pronounced BAIT-LICK), Jesse Kornblum, Jamie Butler, Troy Larson, and Eoghan (pronounced OWEN) Casey all in one event is pretty impressive. Now throw into the mix representatives from the FBI, Secret Service, DoD, Georgia Tech, and various local, state, and federal agencies and you have something pretty special. The quality of the speakers at this year's summit made this THE conference to be at in 2009! Again, great work Rob! Pogue's full take on the Summit is available at his blog, The Digital Standard