Last Chance: MacBook Air, Dell XPS 13 or $600 off with SANS Online Training Ends December 7

South Florida 2015

Fort Lauderdale, FL | Mon, Nov 9 - Sat, Nov 14, 2015
This event is over,
but there are more training opportunities.

Smartphone and Network Forensics Goes Together Like Peas and Carrots

  • Heather Mahalik and Phil Hagen
  • Monday, November 9th, 7:15pm - 9:15pm

Although two distinct and critical forensic disciplines, there are strong ties between the smartphone and network aspects of the forensic process. Smartphone investigations cover myriad devices, operating systems, applications, and data storage mechanisms but a great deal of their functionality involves a single common technology - TCP/IP communications. On the other hand, hunting an attacker's network activities within your environment often identifies endpoints including smartphones as relevant to the investigation, which need in-depth device analysis.

In this talk, Heather Mahalik, will address the smartphone side of this investigative coin as covered in SANS FOR585, Advanced Smartphone Forensics. Phil Hagen will look at things from the network side as covered in SANS FOR572, Advanced Network Forensics and Analysis. As often identified in the forensic process, a comprehensive approach is necessary to conduct a thorough investigation.


Bonus Sessions

The following bonus sessions are open to all paid attendees at no additional cost. There are many different types of events that fall into these categories:

  • SANS@Night: Evening presentations given after day courses have ended. This category includes Keynotes.
  • Special Events: SANS-hosted events and other non-technical recreational offerings. This category includes, but is not limited to, Receptions and Information Tables.
  • Lunch & Learn: Short presentations given during the lunch break.
Monday, November 9
Session Speaker Time Type
General Session - Welcome to SANS Bryan Simon Monday, November 9th, 8:15am - 8:45am Special Events
Smartphone and Network Forensics Goes Together Like Peas and Carrots Heather Mahalik and Phil Hagen Monday, November 9th, 7:15pm - 9:15pm Keynote
Tuesday, November 10
Session Speaker Time Type
DLP FAIL!!! Using Encoding, Steganography, and Covert Channels to Evade DLP and Other Critical Controls Kevin Fiscus Tuesday, November 10th, 7:15pm - 8:15pm SANS@Night
Bueller... Bueller...: Smartphone Forensics Moves Fast. Stay Current or Miss Evidence. Heather Mahalik Tuesday, November 10th, 8:15pm - 9:15pm SANS@Night
Wednesday, November 11
Session Speaker Time Type
Prevent - Detect - Respond Will Tipton, Security Engineer, Infogressive Wednesday, November 11th, 12:30pm - 1:15pm Lunch and Learn
F5 Networks Asks: In a world of encryption everywhere, how can you gain visibility into potential encrypted threats without breaking the bank? Tim Kambourelis, Sr. Field Systems Engineer, F5 Wednesday, November 11th, 12:30pm - 1:15pm Lunch and Learn
IR Event Log Analysis Hal Pomeranz Wednesday, November 11th, 7:15pm - 8:15pm SANS@Night
Wayback Machine Forensics/E-Discovery Evan Dygert Wednesday, November 11th, 8:15pm - 9:15pm SANS@Night
Thursday, November 12
Session Speaker Time Type
Bust a Cap in a Web App with ZAP Adrien de Beaupre Thursday, November 12th, 7:15pm - 8:15pm SANS@Night