2018 Agenda
- Main
- Track 1
- Track 2
- Autopsy
- Workshops
October 16, 2018
9:00 am - 12:00 pm
October 17, 2018
8:00 - 9:00 am
Registration
9:00 - 9:10 am
Brian Carrier (Basis Technology)
9:10 - 9:45 am
Microsoft Office Telemetry: Tracking Your Every Move
Samuel Koffman (U.S. Government)
9:45 - 10:20 am
Messaging App Forensics with Autopsy
Brian Carrier (Basis Technology)
10:20 - 10:35 am
10:35 - 11:10 am
pcapFS – Mounting Network Data for On-the-Fly Analysis
Jan-Niclas Hilgert (Fraunhofer FKIE)
11:10 - 11:40 am
Autopsy Module Challenge Results
Brian Carrier (Basis Technology)
11:40 am - 12:00 pm
What’s Missing in Open Source?
Brian Carrier (Basis Technology)
12:00 - 1:00 pm
1:00 - 1:35 pm
Diffy: Quickly Find an Attacker Hiding in Your Cloud Instances
Forest Monsen (Netflix)
Kevin Glisson (Netflix)
A Combination of Advanced Carver and Intelligent Parser
Teru Yamazaki (Cyber Defense Institute, Inc.)
Brian Carrier (Basis Technology)
1:40 - 2:15 pm
Farming the Loot Cave: Threat Hunting in Memory with the Volatility Framework and Big Data
Andrew Quill (Independent Researcher)
Quick Preview of Drives Using Autopsy
Ann Priestman (Basis Technology)
2:20 - 2:55 pm
Turbinia: Automation of Forensic Processing in the Cloud
Aaron Peterson (Google)
Thomas Chopitea (Google)
Finding the Needle in the Needle Stack: Creative Approaches to Insider Threat Investigations
Emily Wicki (Morgan Stanley)
Enterprise-Scale Digital Forensics with Autopsy
Brian Carrier (Basis Technology)
2:55 - 3:10 pm
3:10 - 3:45 pm
Nick Anderson (Facebook)
Streamline AWS Security Incidents
Asif Matadar (Tanium)
Writing Autopsy Python Modules
Eugene Livis (Basis Technology)
3:50 - 4:25 pm
Docker Detection and Forensics, ‘Gotta catch them all’!
Cem Gurkok (Facebook)
Getting the Most out of RegRipper
Harlan Carvey (Nuix)
Brian Carrier (Basis Technology)
4:30 - 5:05 pm
Chrome Nuts and Bolts: ChromeOS/Chromebook Forensics
Jessica Hyde (Magnet Forensics & George Mason University)
5:05 - 5:30 pm
5:30 - 7:30 pm
October 18, 2018
9:00 am - 5:00 pm