Evidence Generation X - SANS DFIR Summit 2018

Подробнее о видео

Test evidence lies at the heart of our field. We need to be able to test our tools to make sure that they parse data correctly. New hires and students need to have their knowledge tested and challenged in a controlled environment. How do you create realistic, believable, and effective scenarios to test forensic
evidence? After spending several months putting such a scenario together, the presenter will share his experience and insights, as well as the potential “gotchas,” of evidence generation.

Lee Whitfield, Subject-Matter Expert, SANS Institute
Lee Whitfield is the DFIR lead for the SANS OnDemand Subject Matter Expert team where he helps SANS students to fulfill their potential. He has been working in the field of digital forensics since 2006 and has led team of forensic investigators both in his native UK and in the US. Lee has experience in forensic investigations ranging from intellectual property theft to child exploitation. Lee also runs and hosts the annual Forensic 4:cast Awards. He resides in Dallas, Texas with his wife and children.