|
Subject to change
Click Here to download the printable version
Monday, May 24 |
3:00pm - 4:30pm |
Track: Advanced Techniques Lab
EnScript® 101, Kimberly Stone-Kaplan, Guidance Software, Inc ( Basic/Intermediate) |
|
Track: Cybersecurity Lab
Defeating Advanced Hiding Techniques, Dave Shaver, US Army CID (Intermediate) |
|
Track: Digital Acquisition Lab
EnCase® for Anyone - Collections in the Field using EnCase® Portable, Jamey Tubbs, Guidance Software, Inc - NEW |
|
Track: Digital Analysis Lab
Forensic Investigation 101 - Where to Start Looking, James Habben, Guidance Software, Inc (Basic) |
|
Track: eDiscovery Lab
Mini-Series Part 1 - Information Management/Retention Policy, Liz Hall, Will Chesher, Guidance Software, Inc - NEW |
|
Track: General Learning Topics Lab 1
EnCE® Last Minute Review, Howard Williamson, Guidance Software, Inc ( Intermediate) |
| |
Track: General Learning Topics Lab 2
Learning the Digital Forensics Backlog and Creating Highly Effective Investigations, Suresh Sundarababu, Global Solutions Strategy Manager, Dell - NEW |
|
Track: eDiscovery Legal Lecture
New Technologies and New Problems for eDiscovery, David Benton, Home Depot and the American Society of Digital Forensics & eDiscovery, Browning Marean, DLA Piper, Guidance Software, Inc. - NEW |
| |
Track: General Learning Topics Lecture 1
Cloud Computing and its potential impact on Digital Forensic Investigations, Moderator: John Marsh, Guidance Software, Inc, James Valentine, NetApp, Albert Barsocchini, Guidance Software, Inc. - NEW |
|
Track: General Learning Topics Lecture 2
Digital Forensic Reporting, Andy Spruill, Guidance Software, Inc - NEW |
| |
Track: Most Popular Track
Government and Corporate Cybersecurity, Joe Riggins & Stewart Tong, Guidance Software, Inc - NEW |
4:45pm - 6:15pm |
Track: Advanced Techniques Lab
Using COM in EnScript®, Stephen Pascual, Guidance Software, Inc (Intermediate) - NEW |
|
Track: Cybersecurity Lab
Proactive Cybersecurity-Reduce the Attack Surface with Application Whitelisting, Doug Cahill, Bit9 - NEW |
|
Track: Digital Acquisition Lab
Acquisition & Analysis of Physical Memory, Michael Webber, BitSec Forensics, Inc (Intermediate) |
|
Track: Digital Analysis Lab
EnCase® Focus - Difference Between Indexing and Keyword Searching, Daniel Smyth, Guidance Software, Inc |
|
Track: eDiscovery Lab
Mini-Series Part 2 - Data Mapping and Sampling to Locate, Clarify, and Refine Info, Nick Torrecillas, Dave Erban, Guidance Software - NEW |
|
Track: General Learning Topics Lab 1
Bit Torrent: A Forensic Review, Andy Joyce, Forensic Data Recovery Inc. (Intermediate) |
| |
Track: General Learning Topics Lab 2
Social Media Investigations, Frank Zeller, Inland Direct (Basic) - NEW |
|
Track: eDiscovery Legal Lecture
eDiscovery for Law Enforcement (Criminal Investigations), Kenneth J. Withers, Federal Judicial Center and The Sedona Conference, Karl Heisler, Katten Muchin Rosenman LLP - NEW |
| |
Track: General Learning Topics Lecture 1
Follow the Money, John Grancarich, Paul Hastings Janofsky and Walker LLP (Basic) - NEW |
| |
Track: General Learning Topics Lecture 2
Being An Effective Corporate Investigator, Craig Newell, Direct Energy (Intermediate) |
| |
Track: Most Popular Track
Email Investigations, Manfred Hatzesberger, Guidance Software, Inc (Intermediate)
Also offered Wednesday, 5/26 at 11:00am in Digital Analysis Lab |
4:45pm - 7:15pm |
EnCE Exam - EnCE® Phase 1 Exam |
7:00pm - 9:00pm |
Welcome Reception |
Tuesday, May 25 |
8:30am - 9:00am |
Kickoff |
9:00am - 10:00am |
Keynote - Melissa E. Hathaway
President, Hathaway Global Strategies and Sr. Advisor Harvard Kennedy School's Belfer Center
Former Acting Senior Director of Cyberspace, National Security Councils |
10:00am - 11:00am |
Exhibit Hall Break |
10:00am - 12:30pm |
EnCE Exam - EnCE® Phase 1 Exam |
11:00am - 12:30pm |
Track: Advanced Techniques Lab
Databases and EnScript®: Storing and Querying Structured Data, Jason Fredrickson, Guidance Software, Inc (Intermediate) - NEW |
| |
Track: Cybersecurity Lab
Attack Attribution - a Cyber Forensic Perspective, Moderater: Bill Crowell, Former Deputy Director, NSA - Panel: Melissa Hathaway, Hathaway Global Strategies, LLC and Senior Advisor at Harvard Kennedy's School Belfer Center, Ian West, NATO, Director NCIRC, Bruce Wynn, Air Commodore RAF, Former Deputy CIO and CISO for the Royal Air Force, former CTO for C4/ISR/Cyber for the Royal Air Force, Cord Chase, USDA - NEW |
| |
Track: Digital Acquisition Lab
Basic RAID Acquisition and Analysis, Simon Key, Guidance Software, Inc (Intermediate) |
| |
Track: Digital Analysis Lab
Conducting Enterprise Investigations, (Intermediate) - NEW |
| |
Track: eDiscovery Lab
Mini-Series Part 3 - Processing ESI and Electronic Documents, David Wood, Dave Erban, Guidance Software, Inc. - NEW |
|
Track: General Learning Topics Lab 1
Mac Forensics for First Responders, Ryan Chapin, Blackbag Technologies (Basic) - NEW |
|
Track: General Learning Topics Lab 2
How to Create and Perform Effective Keyword Searches (Advanced Searching), Daniel Smyth, Guidance Software, Inc. (Advanced) |
|
Track: eDiscovery Legal Lecture
Judicial Perspectives on Electronic Discovery, Honorable Andrew Peck, US Magistrate Judge, Southern District of New York, Senior Master Steven Whitaker, Senior Master of the Queens's Bench Division, Royal Courts of Justice, United Kingdom, Judge Donald Shelton, Chief Judge, Washtenaw County Trial Court - NEW |
| |
Track: General Learning Topics Lecture 1
Get Schooled in Mobile Forensics, Amber Schroader, Paraben (Basic) - NEW |
|
Track: General Learning Topics Lecture 2
EnCase® Forensic Roadmap, Moderator: Steve Salinas, Panel: Ken Basore & Ashley Stockdale, Guidance Software, Inc |
| |
Track: Most Popular Track
Defeating Advanced Hiding Techniques, Dave Shaver, US Army CID (Intermediate)
Also offered Monday, 5/24 at 3:00pm in the CyberSecurity Lab |
12:30pm - 1:30pm |
Lunch |
1:30pm - 2:00pm |
Exhibit Hall Break |
2:00pm - 3:30pm |
Track: Advanced Techniques Lab
Advanced Reporting in EnScript®, Shawn McCreight, Guidance Software, Inc (Advanced) - NEW |
| |
Track: Cybersecurity Lab
Automated Reverse Engineering of Malware with HBGary Responder Pro and Recon, Rich Cummings, HBGary - NEW |
| |
Track: Digital Aquisition Lab
Advanced RAID Analysis, Manfred Hatzesberger, Guidance Software, Inc (Advanced) |
| |
Track: Digital Analysis Lab
Webpage Reconstruction, John Cotton, Kevin Ripa, Computer Evidence Recovery, Inc. (Basic) - NEW |
| |
Track: eDiscovery Lab
Mini-Series Part 4 - Processing of Email Records, Nick Torrecillas, Brent Botta, Guidance Software, Inc. - NEW |
| |
Track: General Learning Topics Lab 1
Using Virtual Machines, Dave Shaver, US Army CID (Intermediate) |
| |
Track: General Learning Topics Lab 2
*NIX Environments, Chris Pavan & Gordon Stephens, 42 LLC (Basic/Intermediate) |
| |
Track: eDiscovery Legal Lecture
Testing, Sampling and Quality Control in eDiscovery, Scott Carlson, Seyfarth Shaw, Andrew Drake, Nationwide, Monica Palko, Rosetta Stone - NEW |
| |
Track: General Learning Topics Lecture 1
Blended Enterprise Investigations, John Grancarich, Paul Hastings Janofsky and Walker LLP (Basic) |
|
Track: General Learning Topics Lecture 2
Textual Relations, Josh Gilliland, D4 Discovery (Intermediate) - NEW |
| |
Track: Most Popular Track
Windows® 7: What's new in Windows Forensics, John Marsh, Guidance Software, Inc. - NEW
Also offered Wednesday, 5/26 at 11:00am General Learning Topics Lab 1
Also offered Thursday, 5/27 at 8:30am General Learning Topics Lab 1 |
3:30pm - 4:00pm |
Exhibit Hall Break |
4:00pm - 5:30pm |
Track: Advanced Techniques Lab
EnScript® Debugger, Howard Williamson, Guidance Software, Inc. |
| |
Track: Cybersecurity Lab
Government and Corporate Cybersecurity, Joe Riggins & Stewart Tong, Guidance Software, Inc - NEW |
| |
Track: Digital Acquisition Lab
Remote Analysis/Acquisition Considerations and Options, Rodney Smith & Daniel Smyth, Guidance Software, Inc (Basic) |
| |
Track: Digital Analysis Lab
File Identification and Recovery Using Block-Based Hash Analysis, Simon Key, Guidance Software, Inc(Intermediate) |
| |
Track: eDiscovery Lab
Email Case Study, Lead: Brent Botta, Second: Nick Torrecillas, Joe Murin, Guidance Software, Inc. - NEW |
| |
Track: General Learning Topics Lab 1
EnCE® Last Minute Review, Nathen Langfeldt, Guidance Software, Inc. (Intermediate) |
| |
Track: General Learning Topics Lab 2
Mobile Physical Extractions - The Missing Link?, Adrian O'Leary, London Metropolitan Police - NEW |
|
Track: eDiscovery Legal Lecture
How Federal Rule of Evidence 502 Affects Best Practices Regarding ESI, John Rosenthal, Winston & Strawn, Patrick Oot, Electronic Discovery Institute, John Patzakis, Digital Compliance Consulting - NEW |
|
Track: General Learning Topics Lecture 1
Technology Forum, Shawn McCreight, Ashley Stockdale & Kim Stone-Kaplan, Guidance Software, Inc. |
|
Track: General Learning Topics Lecture 2
What to Do When All Hope is Gone - Acquiring Data Off a Dead Drive, John Wiechman & Eddie Wiechman, TLSI, Inc (All Skill Levels) |
| |
Track: Most Popular Track
How to Spot Packet Forgeries, Spoofing, Tunneling and Other Rogue Network Activity, Jamie Levy, Guidance Software, Inc (Advanced) |
5:30pm - 6:30pm |
Exhibit Hall Happy Hour |
6:30pm - 9:00pm |
EnCE Exam - EnCE® Phase 1 Exam |
Wednesday, May 26 |
8:30am - 10:00am |
Track: Advanced Techniques Lab
Mastering Conditions 1, Joe Murin & Liz Hall, Guidance Software, Inc (Intermediate) |
| |
Track: Cybersecurity Lab
Searching for PII and IP in Your Organization, Dave Erban, Jeff Danielson, Guidance Software, Inc (Intermediate) |
| |
Track: Digital Acquisition Lab
The Impact of Multi-core and Multi-threading Architectures on Forensic Imaging Applications Performance, Robert Botchek, Tableau LLC - NEW |
| |
Track: Digital Analysis Lab
Super Timeline Analysis, Rob Lee, SANS Institute, Mandiant - NEW |
| |
Track: eDisovery Lab
Customized SQL Reporting, David Wood, Will Chesher, Guidance Software, Inc. - NEW |
| |
Track: General Learning Topics Lab 1
Large-scale EE Deployment Best Practices, Daniel Smyth, Guidance Software, Inc (Intermediate) |
| |
Track: General Learning Topics Lab 2
On The Outer RIM of your Network... Blackberry Forensics, Andy Spruill, Guidance Software, Inc. |
| |
Track: eDiscovery Legal Lecture
International eDiscovery: Data Protection, Privacy & Cross-Border Issues, Dominic Jaar, Ledgit Consulting Inc., Patrick Burke, Guidance Software, Inc., M. James Daley, Daley & Fey, LLP, George Rudoy, Shearman & Stearling, LLP - NEW |
|
Track: General Learning Topics Lecture 1
Forensic Triage Programs, Risk Assessment Factors, JJ Wallia, ADF Solutions, Inc (Basic) - NEW |
| |
Track: General Learning Topics Lecture 2
An Uninvited Guest (Who Won't Go Home), Bill Blunden, San Francisco State University (Advanced) - NEW |
10:30am - 12:00pm |
EnCE Exam - EnCE® Phase 1 Exam |
10:00am - 11:00am |
Exhibit Hall Break |
11:00am - 12:30pm |
Track: Advanced Techniques Lab
Creating EnScript® Plugins, James Habben, Guidance Software, Inc - NEW |
| |
Track: Cybersecurity Lab
Entropy, Shawn McCreight, Jim Butterworth, Guidance Software, Inc. - NEW |
| |
Track: Digital Analysis Lab
Email Investigations, Manfred Hatzesberger, Guidance Software, Inc (Intermediate) |
| |
Track: eDiscovery Lab
Early Case Assessment and Optimizing Criteria, Will Chesher, Brent Botta, Guidance Software, Inc - NEW |
| |
Track: General Learning Topics Lab 1
Windows® 7: What's new in Windows Forensics, John Marsh, Guidance Software, Inc. - NEW |
| |
Track: General Learning Topics Lab 2
Social Media Investigations, Frank Zeller, Inland Direct (Basic) - NEW |
| |
Track: eDiscovery Legal Lecture
eDiscovery Case Law Update, Mark Sidoti, Gibbons P.C., George Socha, Soch Consulting, Tom Gelbmann, Gelbmann & Associates, Conor Crowley, Law Offices of Conor R. Crowley - NEW |
| |
Track: General Learning Topics Lecture 1
Spy vs. Spy: Is there a stranger in your house?, Joe Riggins, Guidance Software, Inc |
| |
Track: General Learning Topics Lecture 2
Expert Witness Panel: Making It Stick, Moderator: Andy Spruill, Guidance Software, Inc Panel: Larry Daniel, Guardian Digital Forensics & Lynita Hinsch, Forensics Consulting Solutions - NEW |
| |
Track: Most Popular Track
Using Virtual Machines, Dave Shaver, US Army CID (Intermediate)
Also offered Tuesday, 5/25 at 2:00pm in the General Learning Topics Lab 1 |
12:30pm - 1:30pm |
Lunch |
1:30pm - 4:00pm |
EnCE Exam - EnCE® Phase 1 Exam |
1:30pm - 2:00pm |
Exhibit Hall Break |
2:00pm - 3:30pm |
Track: Advanced Techniques Lab
Packing EnScript® Applications, James Habben, Guidance Software, Inc - NEW |
| |
Track: Cybersecurity Lab
How to Spot Packet Forgeries, Spoofing, Tunneling and Other Rogue Network Activity, Jamie Levy, Guidance Software, Inc (Advanced) |
| |
Track: Digital Acquisition Lab
exFAT (Extended FAT), Jeff Hamm, Paradigm Solutions (Intermediate) - NEW |
| |
Track: Digital Analysis Lab
Forensic Tracking of USB Devices, Colin Cree, e-Forensic Services Inc (Intermediate) |
| |
Track: eDisovery Lab
Triage Your Data for Forensic Analysis with EnCase eDiscovery, David Wood, Guidance Software, Inc. - NEW |
| |
Track: General Learning Topics Lab 1
Accrediting the Tradecraft: Academia's Perspective, Moderator: Chuck Cobb, Guidance Software, Inc. Panel Discussion: Anna Carlin, California State Polytechnic University, Christopher Curren, Huntington Beach Police Department (Basic) |
|
Track: General Learning Topics Lab 2* this session is a Lecture
Defeating the Trojan Virus Defense, Ryan Pittman, US Army CID (Intermediate) |
|
Track: eDiscovery Legal Lecture
Advanced Search and Retrieval Technologies, Albert Barsochinni, Guidance Software, Inc., George Socha, Socha Consulting and Tom Gelbmann, Gelbmann & Associates - NEW |
|
Track: General Learning Topics Lecture 1
Adobe Flash Cookies, Eric Huber, Honeywell Global Security (Basic) - NEW |
|
Track: General Learning Topics Lecture 2
Anti-Forensics and Encryption Challenges in Forensic Investigations, Christopher Andrews, Kroll Ontrack |
| |
Track: Most Popular Track
What to Do When All Hope is Gone - Acquiring Data Off a Dead Drive, John Wiechman & Eddie Wiechman, TLSI, Inc (All Skill Levels) |
3:30pm - 4:00pm |
Exhibit Hall Break |
4:00pm - 5:30pm |
Track: Advanced Techniques Lab
Mastering Conditions 2, Joe Murin & Liz Hall, Guidance Software, Inc (Intermediate/Advanced) |
|
Track: Cybersecurity Lab
Performing Attack Attribution of Malicious Code with Entropy, Jim Butterworth, Guidance Software, Inc - NEW |
| |
Track: Digital Acquisition Lab
Encryption for the Forensic Professional, James Wiebe, CRU-Dataport (All Skill Levels) - NEW |
| |
Track: Digital Analysis Lab - This session is a Lecture
Decoding Prefetch Files for Forensic Purposes, Mark Wade, Harris Corporation (Intermediate) - NEW |
| |
Track: eDiscovery Lab
Identifying and Addressing Exceptions, Nick Torrecillas, David Erban, Guidance Software, Inc - NEW |
| |
Track: General Learning Topics Lab 1
Live Forensics: What to Do if You Catch a Cyber Criminal in the Act, Robert Monsour, Forensics3 (Intermediate) - NEW |
| |
Track: General Learning Topics Lab 2
The Automated Investigation: How Automated Analysis Streamlines Digital Investigations, Jason Reeve, Clearwell (Beginner) - NEW |
| |
Track: eDiscovery Legal Lecture
Repurposing eDiscovery Solutions to Meet Expanding Compliance Challenges, Mary Frantz, Enterprise Knowledge Partner LLC (EKP), Keith Chval, Protek International International, Inc, Suellen Galish, Baker Robbins & Company - NEW |
|
Track: General Learning Topics Lecture 1
Forensic Technologies in Incident Crisis Management, Ondrej Krehel, Identity Theft 911, LLC (Intermediate) - NEW |
| |
Track: General Learning Topics Lecture 2
Know Your Enemy - The Advanced Persistent Threat (APT) Tactics, Techniques and Countermeasures, Rich Cummings, HBGary - NEW |
|
Track: Most Popular Track
EnCase® Tips & Tricks, Chris Pavan & Nick Ringold, 42 LLC (Intermediate)
Also offered Thursday, 5/27 at 8:30 am in Advanced Techniques Lab |
Thursday, May 27 |
8:30am - 10:00am |
Track: Advanced Techniques Lab
EnCase® Tips & Tricks, Chris Pavan & Nick Ringold, 42 LLC (Intermediate) |
| |
Track: Cybersecurity Lab
BotNets: A Case Study & Lessons Learned, Ryan Pittman, Dave Shaver, US Army CID (Intermediate) |
| |
Track: Digital Acquisition Lab
EnCase® for Anyone - Collections in the Field using EnCase® Portable, Jamey Tubbs, Guidance Software, Inc - NEW |
| |
Track: Digital Analysis Lab
Forensic Investigation 101 - Where to Start Looking, James Habben, Guidance Software, Inc (Basic) |
| |
Track: eDiscovery Lab
Mastering Criteria, Joe Murin, Brent Botta, Guidance Software, Inc - NEW |
| |
Track: General Learning Topics Lab 1
Windows® 7 : What's New in Windows Forensics, John Marsh, Guidance Software, Inc. - NEW |
| |
Track: General Learning Topics Lab 2
Learning the Digital Forensics Backlog and Creating Highly Effective Investigations, Suresh Sundarababu, Global Solutions Strategy Manager, Dell - NEW |
| |
Track: eDiscovery Legal Lecture
eDiscovery In-House Case Studies, Glenn O'Brien, Liberty Mutual, Matthew Miller, Forsythe, Jeff Fowler, O'Melveny & Myers. - NEW |
|
Track: General Learning Topics Lecture 1
Gone Without a Trace? Finding Evidence of ESI Destruction Software to Support a Claim of Wrongdoing, Christopher Andrews, Kroll Ontrack - NEW |
| |
Track: General Learning Topics Lecture 2
AIRS Reloaded: The Future of Automated Integration, Jim Butterworth, Guidance Software, Inc - NEW |
| |
Track: Most Popular
Acquisition & Analysis of Physical Memory, Michael Webber, BitSec Forensics, Inc (Intermediate) |
10:15am - 11:45am |
Track: Advanced Techniques Lab
10 Things You Overlooked In Your Last Examination, Yogesh Khatri, 42 LLC - NEW |
| |
Track: Cybersecurity Lab
Cyber Threat Management Strategies: Meeting the CHallenges of the Trusted Insider Threat, Michael Theis, Raytheon |
| |
Track: Digital Acquisition Lab
Linux Imaging with Linen, John Casteel, IRS. - NEW |
| |
Track: Digital Analysis Lab
Forensic Tracking of USB Devices, Colin Cree, e-Forensic Services Inc (Intermediate) |
| |
Track: eDiscovery Lab
Planning for a Successful eDiscovery Matter, Liz Hall, Guidance Software. Inc. - NEW |
| |
Track: General Learning Topics Lab 1
Email Investigation, Peter Mercer, Vound Software - NEW |
| |
Track: General Learning Topics Lab 2
Intro to Network Forensics, Gary Golomb, Netwitness (Basic) |
|
Track: eDiscovery Legal Lecture
Preparing eDiscovery 30(b)(6) Witnesses, Albert Barsochinni, Chad McManamy, Guidance Software, Inc., Thomas A. Lidbury, Mayer Brown, Edward Han, Howrey, LLC. |
| |
Track: General Learning Topics Lecture 1
Using Data Mapping Techniques to Prepare Proactive Case Templates and Manage Records Retention, David Wood, Guidance Software, Inc. |
| |
Track: General Learning Topics Lecture 2
EnCase® Forensic Roadmap, Moderator: Steve Salinas, Panel: Ken Basore & Ashley Stockdale, Guidance Software, Inc |
| |
Track: Most Popular Track
On The Outer RIM of your Network... Blackberry Forensics, Andy Spruill, Guidance Software, Inc. |
|
