Techno Forensics & Digital Investigations
2010 Agenda


click on the links to view more information for each speaker
Please note: many files are large and may load slow.


Monday October 25, 2010
8:45AM - 10:00AM - Red Auditorium - Keynote
National Practice Leader Cyber Investigations by Bill Farwell - E-Discovery - Sponsored By: Deloitte
Track 1 - Red Auditorium Sponsored by MAM-A
10:00 - 11:00 AM
A review of ALL Cell Phone Forensics tools and HOW they work - Small Device Digital Forensic Tool Classification System by Sam Brothers, US Customs and Border Protection - Digital Forensics Examiner
11:00 AM - 12:00 PM
The Most Secure Digital Storage Media by Joe Weisenbach, MAM-A, Inc
   
Track 2 - Green Auditorium Sponsored by CRU-Dataport
10:00 - 11:00 AM
Encryption for the Forensic Investigator by James Wiebe - CRU-Dataport
11:00 AM - 12:00 PM
Defeating Encryption through the use of sound planning by James Wiebe - CRU-Dataport
   
Track 3 - Lecture Room A Sponsored by Apple
10:00 - 11:00 AM
What's New in Apple and Forensics Investigations by Jamie Richardson. Senior Systems Engineer - Apple
11:00 AM - 12:00 PM
Fighting the Growing Wave of Stranger Child Abductions by David Biessener - CEO, Voom Technologies, Inc. & Steve Bunting - Senior Forensic Consultant, Forward Discovery, Inc.
   
Track 4 - Lounge Sponsored by SiQuest
10:00 - 11:00 AM
Project VIGILANT: The cold hard truth by Chet Uber, BBHC Global LLC, Director, Project VIGILANT
11:00 AM - 12:00 PM
Introduction to Firefox and Google Chrome Forensics by John Bradley, CEO and Chief Software Architect - SiQuest Corporation
   
Track 5 - Lecture Room B Sponsored by Guidance Software
10:00 - 11:00 AM
Triage and First Responders: Advanced Techniques for Detecting and Collecting Digital Evidence in the Field by Jim Borecki - Guidance Software
11:00 AM - 12:00 PM
Experiences in Enterprise Searching: Tips, Techniques, and Pitfalls by Andy Bair, Senior Security Consultant, KoreLogic
   
Track 6 - Lecture Room D Sponsored By AccessData
LAB
10:00 - 11:00 AM
LAB - Mobile Phone Examiner Plus (MPE+) and Field Tablet by Lee Reiber Director, Mobile Phone Forensics AccessData Group
   
Noon to 1:00PM - On Your Own for Lunch Cafeteria - Exhibits Open
Track 1 - Red Auditorium Sponsored by Wetstone
1:00 - 2:30 PM
Investigating Covert Communications and Advanced Data Hiding by Chet Hosmer - Chief Scientist Allen Corporation / WetStone
   
Track 2 - Green Auditorium Sponsored by CRU-Dataport
1:00 - 2:30 PM
Famous Crimes and Cryptology by James Wiebe - CRU-Dataport
   
Track 3 - Lecture Room A Sponsored by DFLabs
1:00 - 2:30 PM
The "Trusted" Insider: Investigating Intellectual Property Theft by Warren Kruse - BAH
   
Track 4 - Lounge Sponsored by Deloitte
1:00 - 1:45 PM
Corporate Enterprise E-Discovery - Planning, Challenges, and Technologies by Bryan Smith, ENCE - Manager, Deloitte Financial Advisory Services LLP
1:45 - 2:30 PM
Forensic Video Analysis by Mike Ornelas, CFVA - Deloitte Financial Advisory Services, LLP
   
Track 5 - Lecture Room B Sponsored by LearnSecurityOnline
1:00 - 2:30 PM
You Spent All That Money And You Still Got Owned by Joe McCray - LearnSecurityOnline
   
Track 6 - Lecture Room D Sponsored By AccessData
1:00 - 2:30 PM
Collaborative Forensic Analysis for Computer Forensics Labs: by Keith Lockhart Vice President, Training AccessData
   
2:30PM - 3:00PM - Networking Break - Exhibits Open
Track 1 - Red Auditorium Sponsored by BlackBag
3:00 - 4:00 PM
The Pitfalls of Macintosh Forensic Analysis by Derrick Donnelly - CTO, BlackBag Technologies
4:00 - 5:00 PM
iPad Forensics, Some Things You Need to Know by Derrick Donnelly - CTO, BlackBag Technologies
   
Track 2 - Green Auditorium Sponsored by CRU-Dataport
3:00 - 4:00 PM
Hard Drives: Past, Present, and Future by James Wiebe - CRU-Dataport
4:00 - 5:00 PM
Hidden Areas on Hard drives by James Wiebe - CRU-Dataport
   
Track 3 - Lecture Room A Sponsored by Drobo
3:00 - 4:00 PM
Latest Trends in Data Storage by Joe Sacchetti - Data Robotics
4:00 - 5:00 PM
Computer Forensics & Technical Counter-Terrorism by William L. Tafoya & Detective Cynthia A. Murphy
   
Track 4 - Lounge Sponsored by Deloitte
3:00 - 4:00 PM
Network/Enterprise Forensics by Gary Lowe and Cory Mock - Deloitte Financial Advisory Services LLP
4:00 - 5:00 PM
Cloud Computing and E-Discovery by Andy Ruckman - Principal, Deloitte Financial Advisory Services LLP
   
Track 5 - Lecture Room B Sponsored by LearnSecurityOnline
3:00 - 4:00 PM
IT Security Budgeting From the Hacker's Perspective by Joe McCray - LearnSecurityOnline
4:00 - 5:00 PM
Web Shellz: SQL Injection, and Cross-Site Scripting is Boring - Gimme a command prompt by Joe McCray - LearnSecurityOnline
   
Track 6 - Lecture Room D Sponsored by AccessData
LAB
3:00 - 4:00 PM
LAB - Mobile Phone Examiner Plus (MPE+) and Field Tablet by Lee Reiber Director, Mobile Phone Forensics AccessData Group
4:00 - 5:00 PM
LAB- Mobile Phone Examiner Plus (MPE+) and Field Tablet by Lee Reiber Director, Mobile Phone Forensics AccessData Group
   

Tuesday October 26, 2010
8:30AM - 10:00AM - Networking Breakfast and Exhibits Open
Track 1 - Red Auditorium Sponsored by IACIS
10:00 - 11:00 AM
Exploring the exFAT File System by IACIS
11:00 AM - 12:00 PM
Virtualization in Windows 7 by IACIS
   
Track 2 - Lounge Sponsored by Forensic Computers
10:00 - 11:00 AM
Building a Computer Forensics Lab “Making Sense of the Puzzle” by Greg Dominguez, VP - Forensic Computers, Inc
11:00 AM - 12:00 PM
Small is the new Big - Androids, iOS, and the brave new world of Embedded Device Forensics by Matthew M Shannon, Principal and Chief Software Architect - F-Response
   
Track 3 - Lecture Room A Sponsored by Skycatcher
10:00 - 11:00 AM
Hacking the "Hacker" by Todd Hills - Skycatcher
11:00 AM - 12:00 PM
Forensics Through Familiarity by Josh Goldfarb - Director, Cyber Analysis Solutions 21st Century Technologies, Inc
   
Track 4 - Lecture Room B Sponsored by Korelogic
10:00 - 11:00 AM
Password Cracking: Cutting Edge Techniques from DEFCON 2010's Cracking Contest by Korelogic
11:00 AM - 12:00 PM
National Data Hash Repository by Ricky Windsor, DOD Cyber Crime Center - Digital Forensic Examiner
   
Track 5 - Lecture Room C Sponsored by University of Fairfax
9:00 AM - 12:00 PM
Free CISSP EXAM PREP - Session 1 by University of Fairfax
   
Track 6 - Lecture Room D Sponsored by Huron Consulting
10:00 - 11:00 AM
Examination Configuration Management & Validation Testing by Huron Consulting
11:00 AM - 12:00 PM
Network Evidence Collection: The challenge of ensuring accuracy and completeness in the collection of logical files by Huron Consulting
   
Noon to 1:00PM - On Your Own for Lunch Cafeteria - Exhibits Open
Track 1 - Red Auditorium Sponsored by IACIS
1:00 - 2:30 PM
Forensic Update: Windows 7 Artifacts I and II by IACIS
   
Track 2 - Lounge Sponsored by Forensic Computers
1:00 - 2:30 PM
Mobile Forensics A to Z Tips Pitfalls and the stuff between by Amber Schroader - Paraben Corporation
   
Track 3 - Lecture Room A Sponsored by DoJoSec
1:00 - 1:45 PM
Hyper-Segmentation: Network Architecture for Advanced Persistent Threats by Marcus J. Carey, DojoSec Founder
1:45 - 2:30 PM
Computer Forensic Alternatives (Maximum Benefits, Lower costs) by Walter Barr, CSC
   
Track 4 - Lecture Room B Sponsored by ISFCE
1:00 - 2:30 PM
Who's Watching the Watchers? -Insight Into The World of Digital Forensic Examiners by Dr. Doug White and Dave Good, ISFCE
   
Track 5 - Lecture Room C Sponsored by University of Fairfax
1:00 - 2:30 PM
Free CISSP EXAM PREP - Session 2 by University of Fairfax
   
Track 6 - Lecture Room D Sponsored by Huron Consulting
1:00 - 2:00 PM
Data Destruction Examination: Identification and Quantification by Huron Consulting
   
2:30PM - 3:00PM - Networking Break - Exhibits Open
Track 1 - Red Auditorium Sponsored by IACIS
3:00 - 4:00 PM
Forensic Update: Windows Vista/7 Volume Shadow Copies by IACIS
4:00 - 5:00 PM
Windows 7 Hidden Gems by IACIS
   
Track 2 - Lounge Sponsored by Forensic Computers
3:00 - 4:00 PM
Forensics v. Incident Response by Christopher Taylor, Harris Corp - Senior Investigator
4:00 - 5:00 PM
NTFS On-Disk Structures by Christopher Taylor, Harris Corp - Senior Investigator
   
Track 3 - Lecture Room A Sponsored by DoJoSec
3:00 - 4:00 PM
Forensics on a Budget by Joshua Marpet, WhiteHat Security
4:00 - 5:00 PM
iOS 4 Forensics - An OS coming of Age by Sean Morrissey, Paradigm Solutions
   
Track 4 - Lecture Room B Sponsored by ISFCE
3:00 - 4:00 PM
Why Should You Become a Certified Computer Examiner by Doug White - ISFCE
4:00 - 5:00 PM
It's 4 o' Clock and......Your Linux Server was Hacked... by Matthew L McFadden, DC3-DCITA
   
Track 5 - Lecture Room C Sponsored by University of Fairfax
3:00 - 4:00 PM
Free CISSP EXAM PREP - Session 2 Continued by University of Fairfax
4:00 - 5:30 PM
The Challenge of Winning the War for IT Cyber Security Talent by Panel - University of Fairfax