SANS What Works in Forensics and Incident Response Summit 2010

In the past 10 years, the amount of knowledge gained and techniques learned in the digital forensics profession is staggering. Analysts have accomplished this by using the traditional tools, methods, and techniques to acquire and analyze data for a number of cyber crimes and civil cases. The community needs a new discussion on what the most reliable techniques, tools, and analysis methods are that every digital forensic professional should master. This Summit gives you access to the state-of-the-art computer forensic techniques. Top industry leaders, forensics and incident response professionals, and vendors will discuss the latest defenses and technologies in a series of interactive sessions focused on effective incident response and mitigation, forensic analysis, recovery as a result of a data breach, and e-Discovery requests.

What Will You L earn
• Up-to-the-minute, real-world forensic techniques from industry-recognized experts to find
evidence while minimizing the chance of disruption of compromised systems.

• Methods for ensuring practical and accurate incident response and computer forensics for
incidents.

• Details about products and free tools that should be on your short list for use in effective
computer forensics and incident response.

• Lessons learned from compromises, litigation, and incidents in large- and medium-scale
environments.

• Practices of computer forensic pioneers that push the envelope in developing new tools and
techniques for finding key evidence.

• Current trends in malicious attacks and how our forensic/response processes must adapt based
on them.