Last Day to Save $400 on Cyber Security Training at SANS New York City Summer 2018!


To attend this webcast, login to your SANS Account or create your Account.

Mobile Evidence in Modern E-Discovery: Risks, Techniques and Opportunities

  • Tuesday, February 26th, 2013 at 1:00 PM EST (18:00:00 UTC)
  • Paul Henry, Ben Wright and Yuval Ben Moshe
This webcast has been archived. You can view the webcast presentation and download the slides by logging into your SANS Portal Account or creating an Account. Click the Register Now button after you have logged in to view the Webcast.


  • Cellebrite

You can now attend the webcast using your mobile device!


Data stored on mobile devices such as phones and tablets is becoming increasingly important to the resolution of disputes, lawsuits and all kinds of investigations. Records such as images, text messages, chat transcripts and travel routes - along with logs and meta data about those records - are becoming critical to audits, civil lawsuits, criminal prosecutions and internal investigations. Communications such as text messages, chat transcripts, and instant messages - along with the records of those communications, including call logs and metadata - are increasingly considered to be responsive ESI during litigation. In this webinar, SANS instructors Benjamin Wright and Paul Henry provide leading legal cases involving mobile evidence, and key legal issues -- along with possible solutions -- that apply to mobile evidence relevant to a lawyer, a tax auditor, a police officer, an HR investigator, an e-discovery professional or a government regulatory authority. Other topics will include: -- Using audits to identify key custodians and image responsive mobile data before you ever end up in litigation. -- Setting, and enforcing, BYOD policies that will let you collect responsive data from personal devices. -- The mobile ESI preservation and collection process, from identifying the custodians to analyzing the collected device images. -- Chain of custody and proper documentation of mobile ESI--and how to include this documentation together with your other e-discovery efforts. -- Communicating with information technology staff and your digital forensics contractors throughout the e-discovery process.

Click here to view the associated whitepaper.

Speaker Bios

Paul A. Henry

Paul Henry is a Senior Instructor with the SANS Institute and one of the world's foremost global information security and computer forensic experts with more than 20 years' experience managing security initiatives for Global 2000 enterprises and government organizations worldwide.

Paul is a principal at vNet Security, LLC and is keeping a finger on the pulse of network security as the security and forensic analyst at Lumension Security.

Throughout his career, Paul has played a key strategic role in launching new network security initiatives to meet our ever-changing threat landscape. Paul also advises and consults on some of the world's most challenging and high-risk information security projects, including the National Banking System in Saudi Arabia, the Reserve Bank of Australia, the Department of Defense's Satellite Data Project (USA), and both government as well as telecommunications projects throughout Southeast Asia.

Paul is frequently cited by major and trade print publications as an expert in computer forensics, technical security topics, and general security trends and serves as an expert commentator for network broadcast outlets, such as FOX, NBC, CNN, and CNBC. In addition, Paul regularly authors thought leadership articles on technical security issues, and his expertise and insight help shape the editorial direction of key security publications, such as the Information Security Management Handbook, where he is a consistent contributor. Paul serves as a featured and keynote speaker at seminars and conferences worldwide, delivering presentations on diverse topics including anti-forensics, network access control, cyber crime, DDoS attack risk mitigation, firewall architectures, security architectures, and managed security services.

Ben Wright

Benjamin Wright is the author of several technology law books, including Business Law and Computer Security, published by the SANS Institute. With 26 years in private law practice, he has advised many organizations, large and small, on privacy, e-commerce, computer security, and e-mail discovery and has been quoted in publications around the globe, from the Wall Street Journal to the Sydney Morning Herald. Mr. Wright is known for spotting and evaluating trends, such as the rise of whistleblowers wielding small video cameras. In 2010, Russian banking authorities tapped him for experience and advice on the law of cyber investigations and electronic payments. Wright maintains a popular blog at Currently, Mr. Wright is a senior instructor for the SANS Institute.

Yuval Ben-Moshe

Yuval Ben-Moshe is Senior Forensics Technical Director at Cellebrite. In this role, Mr. Ben-Moshe acts as the company’s central knowledge hub and maintains deep connections within the digital forensics, e-discovery, and information security communities. In addition, Mr. Ben-Moshe represents Cellebrite at numerous professional forums and conferences around the globe. Over his 25-year career, Mr. Ben-Moshe has led many technological and business initiatives for cellular communication, software systems and security companies.

Need Help? Visit our FAQ page or email

Not able to attend a SANS webcast? All Webcasts are archived so you may view and listen at a time convenient to your schedule. View our webcast archive and access webcast recordings/PDF slides.