HTCIA 4th Qtr Meeting (2016)
Event Information
Description
Join us December 6th for our 4th Quarter Meeting
Location: Radisson Valley Forge (Casino), Buchanan Room
Directions: Park and enter through the Radisson lobby. Once inside the lobby, use the stairs or elevator to go one level down. On the lower level walk straight ahead into the Pennsylvania Corridor (there’s a sign above the door to this corridor). The Buchanan room is located in the PA Corridor – and there will be a sign outside of the door.
Schedule:
9:00 - 9:30am Registration/Networking
9:30 - 11:30am Finding Cloud Artifacts in Smartphones - How to Avoid Getting Lost in the Cloud (Rey Navarro, Director, MSAB)
Description: Smartphones and the Cloud go hand-in-hand. Cloud-based accounts, apps, and services contain a wealth of data that can serve as useful evidence in prosecuting criminal cases. The smartphones tied to those accounts often hold the keys to this valuable information which could break a case wide open.
The presentation will cover:
The Basics of Dumping Smartphones
- Best practices for seizing cell phones (network isolation, remote wipe prevention, account preservation, etc)
- Types of app data stored
- App Backup Logicals vs Agent Logicals
- Forensic examiner challenges
Cloud Artifacts
- Types of Cloud Accounts
- Cloud Tokens
- Cloud Account Extractions
Putting it all together with Mobile Device Link Analysis
- Importing phone dumps and CDR's
- Connection Diagram Exercise
- Creating timelines
- Geomap Exercise
- Language Translation Exercise
- Conversation View Exercise
The Future of Cell Phone Forensics
- What's down the road...
Speaker Bio: Rey Navarro joined MSAB in 2012 as an Area Manager and is currently Director of US State & Local Law Enforcement Sales. He served 7 years in the US Navy as a Surface Warfare Officer after graduating from the US Naval Academy in 2001. His military background includes tours of duty as an IT Manager aboard guided missile destroyers, two deployments to the Persian Gulf, as well as a boots-on-ground tour in Northern Iraq attached to an Army battalion as their counter radio-controlled IED specialist. His duties focused primarily on countermeasures to combat cell phone detonated roadside bombs. Rey is also 1st Vice President of the HTCIA Mid-Atlantic Chapter. He is based out of the DC Metro area and is living the American dream in Fairfax, VA with 3 kids, a dog, and a minivan.
11:30 - 12:00 Q&A / Open Discussion Forum
MSAB will set up laptops in the room with different products on board so anyone wanting a little hands-oncan do so!
