Join SANS Certified Instructor, Kathryn Hedley as she takes you on a journey into the "Secret Life of Devices." In her six-part workshop series, she explores digital forensics fundamentals through hands-on sessions on data conversion, file analysis, data recovery, timestamp interpretation, and more, empowering attendees with the knowledge to master digital investigations.
In the digital age, understanding the underpinnings of digital devices and their stored data is more crucial than ever, particularly for those in fields like law enforcement, IT security, or even curious hobbyists. The "Secret Life of Devices" workshop series, presented as a journey into digital forensics fundamentals, offers an engaging way to dive deep into the world of digital evidence.
Workshop 1: Demystifying Data
The series kicks off with Demystifying Data: Hands-on Data Conversion Between Binary, Hexadecimal, Decimal, and ASCII. This workshop is tailored to those eager to decode the language of computers. Participants delve into manual and tool-based conversions, learning to interpret data across various formats—essential skills in digital forensics for understanding how data is stored and manipulated. Through practical, real-world examples, attendees gain hands-on experience that lays the foundation for further exploration in the series.Workshop 2: Beyond File Names
The second workshop, Beyond File Names: Decoding the Secrets of Files with Signatures & Metadata, moves beyond the surface to uncover the real nature of files. It's not uncommon for file extensions to mislead, but through this session, participants learn to use file signatures and analyze metadata to discover a file's origin, authorship, and more. This practical knowledge is indispensable for anyone needing to extract and scrutinize the underlying information within their digital environments.Workshop 3: Data Carving
In Data Carving: Recovering Hidden Files from Digital Graveyards, attendees learn that nothing is ever truly deleted. This workshop explores the realms of allocated and unallocated clusters and file slack—spaces where deleted data linger. Through active engagement, participants develop the ability to recover files they once thought were lost forever, an invaluable skill for data recovery and digital forensics.Workshop 4: Decoding Time
Understanding how data is ordered and how timestamps are stored across different systems is crucial. Workshop 4, Decoding Time: Understanding Endianness and Timestamp Formats demystifies these aspects, enhancing participants' abilities to interpret data accurately and understand the chronological order of events in digital investigations.Workshop 5: Hands-on Digital Forensics
As participants progress to Exploring Evidence with Mounted Images, they acquire the skills to mount and navigate forensic disk images. This workshop provides practical experience with tools from both Windows and Linux ecosystems, allowing a comprehensive view of digital evidence and how forensic professionals extract critical information from digital devices.Workshop 6: Demystifying Base64
The final workshop, Demystifying Base64: A Detailed Beginner's Guide to Encoding and Decoding, reveals the secrets behind the seemingly cryptic Base64 encoding. This session not only teaches how to decode these strings but also explores their applications in secure communications and web development, making it highly relevant in our increasingly digital communication networks.Each workshop in the "Secret Life of Devices" series is designed to empower attendees with the knowledge to tackle modern digital forensic challenges. From understanding basic data structures to engaging with advanced forensic techniques, participants leave these workshops equipped to navigate the complexities of the digital world more confidently. Whether you're a professional seeking to enhance your skills or a novice intrigued by digital forensics, this series offers valuable insights and hands-on experience to transform you into a proficient digital detective.