Agenda – The Computer and Enterprise Investigations Conference

	Topics in Digital Forensics	Digital Forensics Labs	Advanced Digital Forensics Labs	Cyber-threat Response And Management	Cybersecurity and Compliance Labs	E-Discovery: Legal Issues, Technical Challenges, and Solutions	E-Discovery Labs for the Practitioner	EnCase in Action	Handling Regulatory, Compliance, and Risk Management Challenges	Smartphone, Social Media and Cloud Investigations

	SUNDAY 5/19/2013
3:00p - 4:00p	Opening Keynote Victor Limongelli, President and CEO, Guidance Software, Inc.
4:30p - 6:00p	EnCE Last Minute Review	Tips and Tricks from Guidance Software Tech Support	Postmortem Forensics In A Phishing Attack	Hunting for Unfriendly Easter Eggs	Living Dangerously - Malware Analysis	TAR - What is Fiction and What is Real?	EnCEP Review	Simple Data Assessments	Leveraging Endpoint Data to Solve Big Business Problems...	Investigation on Kindle Fire
6:00p - 8:00p	Welcome Reception hosted by Guidance Software
	MONDAY 5/20/2013
8:00a - 9:15a	Proactive Forensic Test Methodology	NTFS Logfile Forensics	Raw Data Carving	How To Layer Threat Intelligence Into Your Enterprise Environment	Cybersecurity 101	E-Discovery best practices and avoiding common mistakes	Planning for Your Next In-House eDiscovery Case	Corporate eDiscovery Best Practices using EnCase Enterprise...	Achieving Compliance: Sensitive Data Discovery and Policy...	Evidence in the Cloud - Business Use of Online Services
9:30a - 10:30a	Industry Keynote Michael Hayden, Former Director of the Central Intelligence Agency, former Director of the National Security Agency
11:00a - 12:00p	Writing Expert Reports and Defending them in Court	Examining Volume Shadow Copies - The Easy Way	UEFI, MBR, and GPT oh my!	Responding to a Cyber Security Incident	How to Configure and Use SQL with EnCase Products	E-Discovery Case Law: Tips on Avoiding These Real Live Discovery...	Mitigating EDRM Left Side Risks and Lessons Learned...	EnCase Enterprise and VMware: An Agile Platform for Malware...	Incident Response and Credit Card Fraud Investigations	The Technical Challenges of Bring Your Own Device (BYOD)
1:30p - 3:00p	Computer Forensics and Testimony	EnCase App Central: Stake your claim!	Following an Intrusion Through a Microsoft Network	You can panic now - A DFIR Look at APT-based Attack	Incident Response 2.0 - Rapid Triage, Containment, and...	Successful Deposition Tactics and Strategies: So you are now part...	Data Encryption and eDiscovery Collection and Processing	Successful eDiscovery in a Bring-Your-Own-Device Environment	Using the Legal Hold Functionality of EnCase eDiscovery to Assist...	Artifacts of Webmail Usage
3:30p - 5:00p	Risky Business - Starting/Running your own forensics practices	Correlating forensic results from multiple operating systems	Offensive Digital Forensics	How the World will End: The Spy is in the Cybersphere	Using EnCase Analytics to Identify Connections Between...	E-Discovery Collaboration – the Interplay between...	How to Configure and Use SQL with EnCase Products	Distributed collection techniques - reduce travel by leveraging VMs	The 2013 Verizon Data Breach Investigation Report	Logical vs. Physical Acquisition on Mobile Devices
5:00p - 6:00p	Exhibit Hall Happy Hour
	TUESDAY 5/21/2013
8:00a - 9:30a	Expert Witness--Preparing to Qualify and Testify	Custom Analysis with EnCase v7	New Forensic Highlights of Windows 8	Developing a Capability-Driven IR Program		Managing Cross Border and International Regulatory Inquiries...	Connectors Tips & Tricks	Integrating Encase CyberSecurity and 3rd Party Incident...	Recognizing the Critical Role of Legal for an Effective Compliance...	Using Cloud Computing in Computer Forensics & Electronic Discovery
10:30a - 12:00p	Optimizing your System for Superior EnCase Forensic Version 7...	Protected File Analysis in Practice Using EnCase with Passware	Advanced Reporting	How CISOs and General Counsels are Quickly Becoming Best Friends	Compliance Auditing with EnCase Cybersecurity	Judicial Perspectives on Current Case Law that Influences E-Discovery	Mastering EnCase Criteria	EnCase eDiscovery Processing Workflow	The Impact of the EU Data Protection Reform on Cross-Border...	Legal Ramifications of BYOD
1:30p - 3:00p	Performing Field Triage and Data Collection with EnCase Portable	Extending EnCase Forensic 7: Modules and Extensions	Mac OSX - Delving a Little Deeper	Exploring the data models of EnCase Analytics	Building an Integrated Response Capability w/EnCase Cybersecurity	Building a Scalable E-Discovery Process to Fit Your Organizations...	The Art and Science of Creating EnCase eDiscovery Keywords...	Tips and Tools for using EnCase for Audits and Investigations	The "Trusted" Insider: Investigating Intellectual Property Theft	Social Media and Cloud Computing Artifacts on Smart Phones and...
3:30p - 5:00p	Converting E01 Files to a Working VM and Pulling Out Useful...	SSD Forensics	NetWars	Speed Up Your IR Investigations with IOC's from FireEye	Network Forensic Investigations of Hacking Incidents	Effective information management and cost effective e-discovery...	Load Files and Production	Modular EnScript Code Design to simplify validation and code...	Information Security Risk Assessments	Getting the Evidence when the Evidence is in Pieces: Damaged...
	WEDNESDAY 5/22/2013
8:30a - 10:00a	N-Gram Analysis in Suspect Author Identification of...	Making the most of EnCase Processor				eDiscovery Future	Quality Control Perspectives in EnCase E-Discovery	Using Random Sampling to Reduce your Backlog	Whistleblower and Fraud Investigations	Vehicle System Forensics
10:15a - 11:45a	Future of EnCase	Enterprise-Scale Linux Memory Forensics	Memory Forensics	Shaking up the Security Stack: The Future of EnCase Cybersecurity	When Macs get Hacked	E-Discovery Done Right	Cloud-Based ECA and Review for Production			EnCase Phone Acquisitions

CEIC 2013