The Greater Augusta ISSA invites you to join us for our next quarterly meeting. We are excited to present Hal Pomeranz (https://twitter.com/hal_pomeranz)!

IR Event Log Analysis
Hal Pomeranz, Deer Run Associates

Windows event logs contain a bewildering variety of messages. But homing in on a few key events can quickly profile attacker activity. From administrator logins, to scheduled tasks, to entries related to system services, and more-- the event logs are a one-stop shop. Learn to "crack the code" and enhance your investigations by adding
event log analysis to your toolset.

Hal Pomeranz is an independent digital forensic investigator who has consulted on cases ranging from intellectual property theft, to employee sabotage, to organized cybercrime and malicious software infrastructures. He has worked with law enforcement agencies in the US and Europe and global corporations. Hal is a SANS Faculty Fellow, and a respected author and speaker at industry gatherings worldwide.

About the Greater Augusta ISSA

The ISSA is an international organization of Information Systems Security Professionals. Read more about the Global ISSA at http://www.issa.org. The Greater Augusta Chapter of the ISSA meets quarterly. We invite you to attend our meetings to meet with other local security professionals, to network, share ideas, receive technical training, and to have fun while you earn CPE’s.

Members receive exclusive benefits such as discounts on SANS training and social "meet and greet" opportunities with some of the industry's celebrities. The discounts on a single course can pay for your membership for the year! If you're not a member already, please see:
http://augusta.issa.org/p/membership.html

Follow us on Twitter! https://twitter.com/augustaissa

Where and When

The presentation will be at Georgia Regents University (formerly known as Augusta State) in University Hall room UH170. Pizza will be served at 6:30PM and the meeting will start at 7:00PM. For a map showing the location of University Hall, please see the parking pass (which you'll need to print and place on your dashboard):
https://drive.google.com/file/d/0BzQ65xrcMwNEcDlkUjl4M2E4OU0/view?usp=sharing

This is a FREE public meeting.

This meeting is sponsored by the Hull College of Business (http://www.gru.edu/hull/).