OnDemand Special Offer - iPad Air w/ Smart Keyboard, Surface Go, or $300 Off!


To attend this webcast, login to your SANS Account or create your Account.

IP Theft: Collecting Artifact Evidence from the Cloud and Mobile

  • Tuesday, March 25, 2014 at 1:00 PM EDT (2014-03-25 17:00:00 UTC)
  • Jamie McQuaid, Jad Saliba, Heather Mahalik


  • Magnet Forensics

You can now attend the webcast using your mobile device!



Every organization has valuable information that they want to protect. Preventing that information from walking out the front door has become increasingly difficult with mobile devices and cloud based storage solutions. DLP and prevention based tools are helpful but they will never eliminate all exit points in an organization. There will always be a need to investigate those circumstances when prevention fails.

When investigating an intellectual property (IP) theft case, a strong understanding of how IP data can be stolen is essential-without that knowledge, how do you know if you are finding all possible evidence? The number of applications for mobile devices and PCs is growing by the minute and it is impossible for an examiner to keep up with all the potential artifacts.

Employees are the main source of IP theft for most organizations. This webinar will walk you through an IP theft case study, investigating many of the common methods and artifacts that an internal employee might use to steal valuable data from your organization, including mobile devices and cloud storage artifacts.

Join Heather Mahalik from SANS who will discuss the challenges of investigating an IP theft case with the emergence of BYOD and cloud storage providers in the enterprise space, followed by Jad Saliba and Jamie McQuaid of Magnet Forensics who will present a case study to demonstrate the tactics and tools used to collect mobile and cloud storage evidence as it relates to IP theft using Internet Evidence Finder (IEF).

Speaker Bios

Heather Mahalik

Heather is the Senior Director of Digital Intelligence at Cellebrite.  At the SANS Institute, Heather is a senior instructor, author and the course lead for FOR585: Smartphone Forensic Analysis In-Depth. As if that isn't a full enough schedule, Heather also maintains www.smarterforensics.com, where she blogs and hosts work from the digital forensics community. She is the co-author of Practical Mobile Forensics (1st and 2nd editions), currently a best seller from Pack't Publishing, and the technical editor for Learning Android Forensics from Pack't Publishing.

Jad Saliba

Jad Saliba, Founder and CTO of Magnet Forensics, is a former digital forensics investigator who left policing in 2011 to devote all of his time to researching new methods of recovering and analyzing all types of evidence for digital forensics investigations. He has since dedicated his efforts to building Magnet Forensics and developing Internet Evidence Finder (IEF) into a thorough and easy-to-use software solution that recovers Internet-related artifacts from computers, smartphones and tablets. Jad is a recognized digital forensics speaker at industry events including: CEIC, Crimes Against Children Conference, EuroForensics, F3, HTCIA, ICDDF, SANS, and the Canadian Police College. Jad served as a police officer for the Waterloo Regional Police Service for seven years and holds a Diploma in Computer Science and Network Security from Mohawk College (Hamilton, Canada).

Jamie McQuaid

Jamie McQuaid CISSP, EnCE is a forensics investigator with a background in corporate investigations spanning various industries from telecommunications to financial services and manufacturing. His responsibilities included conducting both forensic and physical investigations as well as incident response globally across the organization. McQuaid is currently a forensics consultant at Magnet Forensics where he assists in the development of Internet Evidence Finder (IEF) and provides skilled support to customers with his combined knowledge of IEF and digital forensics. He holds an Advanced Diploma in Computer Security and Investigations from Fleming College and an Honours B.A. from the University of Toronto.

Need Help? Visit our FAQ page or email webcast-support@sans.org.

Not able to attend a SANS webcast? All Webcasts are archived so you may view and listen at a time convenient to your schedule. View our webcast archive and access webcast recordings/PDF slides.