Rewind, Revisit, Reinforce, Retain with OnDemand - Special Offer Available Now


To attend this webcast, login to your SANS Account or create your Account.

Mobile Malware and Spyware - Working Through the Bugs

  • Wednesday, February 26, 2014 at 1:00 PM EDT (2014-02-26 18:00:00 UTC)
  • Cindy Murphy

You can now attend the webcast using your mobile device!



Can malware and spyware taint the evidence you find on mobile devices? Could they actually potentially help your investigation? In this session, learn the difference between malicious targeting, such as spear phishing, and inadvertent mobile malware installation from app stores and other locations. Find out what to listen for when you interview victims. Learn what to look for in mobile forensic exams, including what should trigger an in-depth malware exam. See how to unpack and decompile APK files using free tools in order to see the malware's underlying code and ascertain what it might be doing. Finally, learn what ramifications malware -- or its absence -- can have for your cases.

Speaker Bio

Cindy Murphy

Cindy Murphy, is co-owner, president and lead investigator at Gillware Digital Forensics. Cindy Murphy served in law enforcement for more than 30 years, including 24 years as a detective with the Madison Police Department in Wisconsin. During 17 of those years she worked as a certified digital forensics examiner. She is a SANS certified instructor and co-author of the SANS FOR585 Advanced Smartphone Forensics course. She earned her MSc in Forensic Computing and Cyber Crime Investigation through University College in Dublin. Cindy is also a veteran, a mother, a musician, a protester for first amendment rights, a Brittany Spaniel enthusiast, and an expert knot tier.

"Good, real-world experience. Clearly, Cindy has been there, done that." - Chris Mallow, University of Oklahoma
"Cindy is Awesome! She fully understands what is happening in the field and how to do our job better." - John P., Shell Oil

Need Help? Visit our FAQ page or email

Not able to attend a SANS webcast? All Webcasts are archived so you may view and listen at a time convenient to your schedule. View our webcast archive and access webcast recordings/PDF slides.