Welcome Reception

Registration & Breakfast

Internet of Things Forensics

Virtual Currency Investigations: Fear Not the Blockchains

Supporting the Unsupported: Carving, Parsing, and Creating Custom Artifacts

More Data, Better Focus: Improve Your ICAC Investigations with AI and Categorization

AXIOM Essentials

Windows Event Trace Log (ETL) Forensics

IOC Easy as 1-2-3

Break & Ask the Expert Stations

Forensics in the Corporate Cloud: How to Conduct Office 365 and Google Suite Investigations

Using GrayKey and AXIOM to Acquire and Parse iOS Data That Other Tools Miss

Cloud Forensics for Law Enforcement: Get the Evidence You Need to Move Cases Forward

Improvise, Adapt, Overcome: A New Mantra for Digital Forensics Professionals

Memory Forensics: Using Memory Forensics Analysis to Guide Your Investigation

Lunch & Ask the Expert Stations

Guest Keynote by Ovie Carroll, Director of DOJ CCIPS Cybercrime Lab, SANS Instructor and Author

Break & Ask the Expert Stations

Windows Store & Apps (APPX) Analysis

Innovative Solutions for the Changing Nature of Digital Forensic Investigations "I'm a 19-Year Old College Student...and I Carry a Badge."

Supporting the Unsupported: Carving, Parsing, and Creating Custom Artifacts

Using GrayKey and AXIOM to Acquire and Parse iOS Data That Other Tools Miss

From Dead Box to Live Memory: Breathing Context into Forensic Investigations

Leveraging PowerShell and Python for Incident Response and Live Forensic Applications

Mobile Panel

DFIR Capture the Flag (CTF) Challenge

Magnet Forensics Customer Appreciation Event

Breakfast

Keynote by Magnet Forensics

Lunch and a live recording of The Forensic Lunch podcast with David Cowen and Matthew Seyer

Unsupported Apps. What Can Be Done? A Methodological Approach to Mobile App Forensics

Leveraging AXIOM for Insider Threat Investigations

More Data, Better Focus: Improve Your ICAC Investigations with AI and Categorization

From Dead Box to Live Memory: Breathing Context into Forensic Investigations

Cloud Forensics for Law Enforcement: Get the Evidence You Need to Move Cases Forward

Taking Your Investigations One Step Further, What Else Can You Be Doing?

Corporate Panel

Break & Ask the Expert Stations

Forensics in the Corporate Cloud: How to Conduct Office 365 and Google Suite Investigations

Magnet Certified Forensics Examiner (MCFE) – AXIOM Certification

Using GrayKey and AXIOM to Acquire and Parse iOS Data That Other Tools Miss

Collaboration to Combat Online Child Sexual Exploitation

Conducting O365 Investigations in a Post-Activities World