Digital Forensic Analysis - Practical example

Talk:

A Practical Example of Digital Forensic Analysis by Paul van Ramesdonk. Paul has completed a Masters degree in Digital Forensics.

Abstract:

The talk will provide an overview of Principles of Digital evidence, capture analysis and presentation. Looking at an image captured using a demo version of Belkasoft (the image would have been pre-processed due to time constraints) and challenges with digital evidence. If possible we will do a live demo of imaging of a USB flash drive and process it. We shall attempt to image the flash drive and see if we can carve any deleted files, we may only have time to use FTK Imager.

Bring your flash drives to see what can be recovered. Smaller (4GB / 8GB) USB flash drives would be better due to the time constraints of the presentation.

Refreshments:

VOSS (http://www.voss-solutions.com)

Parking:

There are two parking levels, each with a separate entrance. There are VOSS marked bays each with an A4 size sign in both parking levels. Which level to park in basically comes down to which one has more free bays which is hard to predict.

One entrance (to the upper parking) is up the ramp past the fountain. Turn right once you go through the boom. Just keep turning right.

The other entrance (to the lower parking) is down the ramp (opposite Discovery entrance). Go through the boom, drive straight for a little bit and then turn right (there is no other option). Drive all the way to the end. Then just keep turning right.

At the boom you should buzz security and tell them that you're coming to see VOSS.