Sales Ended

Joint HTCIA Mid-Atlantic Chapter and RCFG Meeting - February 23, 2017

Event Information

Share this event

Date and Time

Location

Location

George Mason University

Johnson Center, 3rd Flr, Rm F

4400 University Dr

Fairfax, VA 22032

View Map

Event description

Description

HTCIA Mid-Atlantic and RCFG are pleased to invite you to our next Joint Chapter Meeting.

When:
February 23, 2017
1:30 pm to 5:30 pm

Where:
George Mason University
Johnson Center, 3rd Floor - Room F
4400 University Dr
Fairfax VA 22032
* The nearest available visitor parking can be found at the Mason Pond Parking Deck.

Schedule:

1:30pm to 3:30pm BlackBag Lab presented by Hal Harris (please bring your own laptop for hands-on portion)
3:30pm to 4:00pm Networking Break
4:00pm to 5:00pm Methodology for Dealing with Mobile Data that is Missed by Commercial Tools presented by Jessica Hyde
5:00pm to 5:30pm Board Meeting (board members only)

Topic Details:

BlackBag Lab
presented by Hal Harris

Learn about FSEvents, memory image analysis, and iOS SQLite queries in this interactive, hands-on lab featuring BlackLight. In order to participate in the hands-on portion, please bring your own laptop.
------------
Methodology for Dealing with Mobile Data that is Missed by Commercial Tools
presented by Jessica Hyde

Every day new mobile applications hit the App Store and Google Play. These new apps contain chat functions or other storage that can be crucial evidence in a case. Often these apps are not yet supported by commercial tools. This class will discuss methodologies for discovering and parsing data from unsupported applications. We will go through the methodologies utilized to discover, test, find, parse, and script to obtain forensic evidence dealing with new applications. The presentation will outline the process used for two game applications that had chat functionality not supported by commercial tools.

Date and Time

Location

George Mason University

Johnson Center, 3rd Flr, Rm F

4400 University Dr

Fairfax, VA 22032

View Map

Save This Event

Event Saved