Join us for food and drinks at Denver OWASP's May Meeting

Please come join us for our OWASP Denver meeting. Enjoy some great food, drinks and networking. PLEASE NOTE, WE ARE BACK AT DAVE & BUSTER'S FOR THIS MEETING.

Topic: Using Interactive Artifacts for Investigations

Presenter: Phillip Kealy
Malware on workstations is annoying enough, but when an attacker accesses your systems using remote desktop or other interactive software, you feel down right violated.

The presentation includes a technical dive into forensic artifacts generated during interactive logon sessions with multiple examples from real-life investigations. The presentation covers well known artifacts including MuiCache, UserAssist, and Windows Recycler, but also explores lesser known artifacts including the RDP Bitmap Cache, the Windows 10 Timeline, and Jumplists.

Speaker Bio:
Phillip Kealy is the Senior Manager for Incident Response for the Mandiant Denver and Phoenix offices and provides emergency services to clients when a security breach occurs. With over 15 years of experience in both private and public sector environments, Mr. Kealy has a background in incident response, security architecture, and networkin