On August 15-16, attendees joined us in Austin, TX or tuned in Live Online for the SANS DFIR Summit for its 15th anniversary!
We invited Ashton Rodenhiser of Mind's Eye Creative to create graphic recordings of our Summit presentations. If you missed a talk or are looking to view the Summit through a visual lens, take a look at the recordings below.
In addition to graphic recordings, PDFs of Summit presentations will be made available on the SANS Summit Archives page (SANS account required) and videos will be posted to YouTube over the next several months.
*If you registered for the Summit, video recordings are available on your Summit Access page in your SANS Portal.
Keynote: DFIR Evidence Collection and Preservation for the Cloud
Josh Lemon, Certified Instructor | Megan Roddie, Course Author
Building a Pattern of Life - Leveraging Location and Health Data
Jared Barnhart, Digital Intelligence Specialist, Cellebrite | Heather Mahalik, Faculty Fellow
Missing Pieces - Tips and Tricks on how to ensure your acquisitions aren’t missing critical data
Jessica Hyde, Founder, Hexordia | Cesar Quezada, Research and Development Engineer, ArcPointA little bit of this, a little bit of dat
Brian Maloney, SANS AlumniStepping Out of the Android Malware Sandbox - Running & Analyzing Malware on a Physical Honeyphone
Joshua Hickman, Vice President, Cyber Risk Practice, KrollThe Truth About USB Device Serial Numbers – (and the lies your tools tell)
Kevin Ripa, Certified InstructorEstablishing Connections: Illuminating Remote Access Artifacts in Windows
Fernando Tomlinson, Principal Digital Forensics and Incident Response Consultant, MandiantCracking the Beacon: Automating the extraction of implant configurations
Derek Ditch, Principal Security Research Engineer, Elastic | Jessica David, Senior Security Data Engineer, ElasticStay ahead of the game: automate your threat hunting workflows
Towne Besel, Security Engineer, CiscoKeynote: The Godfather of Forensics: How to Leverage Your “Year One” to Get an Offer You Cannot Refuse
Rob Lee, SANS FellowHunting for Active Directory persistence
Thomas Diot, Senior Consultant | Incident response, WavestoneHunting threat actors using OSINT forensics
Abi Waddell, DFIR Manager and Founder of Inquirix, InquirixConducting Forensic Examinations in Zero Trust Environments
Justin Tolman, Forensic Evangelist, ExterroAnalysis Paralysis? Setting the Right Goal for Your Incident Analysis
Gerard Johansen, Principal Incident Handler, Fortalice SolutionsWhatsApp with Your iMessage, Dude?!
Stacey Randolph, Director, DFIR, Stroz Friedberg | Christopher Vance, Manager of Curriculum Development, Magnet ForensicsDetecting malicious actors in Google Workspace
Korstiaan Stam, Founder, Invictus Incident ResponseUpdates in DFIR
Philip Hagen, Faculty Fellow | Heather Mahalik, Faculty FellowIf you'd like to check out our other upcoming Summits, you can view the latest listing here.