Agenda Europe

Please note that some workshops will be held in German. If you would like to follow these workshops in English, you can follow them from the agenda Middle East (mh Service, Magnet, T3K, Opentext and Evidence Talks)

For some sessions you will receive a test license a few days prior to the workshop. Please install this in order to take the most out of the workshop!

Most of the sessions will be recorded. If you cannot attend live, we will be happy to provide you the records.

21.09.2020

9:00-10:00

German

mh Service: IT-Forensik Dienstleistungen, Data Recovery und weitere Neuigkeiten von mh Service

Learn how we can provide support for your IT forensic investigations and get to know more about the latest data recovery options and our latest hardware solutions

10:30-12:30

English

Hancom WITH: Introduction of Mobile Data Extraction & Live Demo of MD-NEXT & Introduction of Mobile Data Analysis & Live Demo of MD-RED

 2. Communication apps analysis – Messengers, Email, Call, SMS; Visualized relationship analysis with multiple phone evidences
2. analysis of communication apps: messenger, e-mail, calls, SMS; visualised relationship analysis with several telephone artefacts

You will receive a test license a few days before the workshop session. Please install it before the session in order to take the most out of it.

13:30-15:30

English

MCMS: Detego Automation, spend less time waiting and more time analysing

Learn how automated data acquisition and analysis queues eliminate labour-intensive investigation processes. No more backlogs thanks to job queues customized to your process.

22.09.2020

8:00-10:00

German

Opentext: Praktische Training-Session mit EnCase

TBD

10:30-12:30

English

Elcomsoft: Elcomsoft News in Password Recovery and Data Decryption: Breaking Encryption Effectively

In this webinar we’ll start with an overview of our recent developments in password recovery and data decryption, including encryption implemented in office files, crypto containers and web browsers. We’ll discuss the most effective scenarios in getting access to digital evidence. Finally, we’ll work with you on a case to try most favourable approaches in data decryption and thus sharpen your skills in it.

13:30-15:30

English

Oxygen Forensics: What’s new in Oxygen Forensic Detective 2020

This year Oxygen Forensics has already released 5 big updates with dozens of notables features that include the Huawei Android Dump method for overall 100+ Huawei devices, full file system extraction from Apple iOS devices using checkm8 vulnerability, data extraction from 83 cloud services, support for E01 images, new computer artefact support, etc. Join the Oxygen Forensics session to learn more and ask your questions to the Oxygen Forensics representative.

You will receive a test license a few days before the workshop session. Please install it before the session in order to take the most out of it.

23.09.2020

08:00-10:00

English

Griffeye: Techniques for processing large volumes of media to detect and rescue child sexual abuse victims.

A significant challenge to investigators and their teams is the slow and laborious process of manually reviewing millions of seized images and videos. In this webinar you will learn the techniques for processing large volumes of media to detect and rescue child sexual abuse victims. We cover how to use different techniques and tools to reduce workload and generate better results.

10:30-12:30

German

Magnet Forensics: Magnet Produkt Portfolio Update

Axiom: New WhatsApp possibilities, Grayshift/AXIOM Mobile update, Magnet.AI – finding similar pictures, improved reports/exports, AXIOM Roadmap
Axiom Cyber: Microsoft Azure Cloud extension
Magnet AUTOMATE: More complex workflows, improved Watch Folder features, Android & iOS backup decryption
Magnet OUTRIDER 2.0: Extended first responder triage features

13:30-15:30

English

Cellebrite: Digital Investigations for Windows and Mac

Join this webinar to learn about the latest digital investigation techniques for Windows and Mac. 

This session will dive into the new triage features within MacQuisition 2020 R1, the ability to remotely collect data from Macs, and how to image a T2 chip Mac. You will also be able to see the latest enhancements within BlackLight 2020 R1

24.09.2020

8:00-10:00

English

AceLab: TRIM on SATA/NVMe SSDs and HDDs: How to Get Evidence Instead of Zeros

TRIM is a well-known technological command for SSDs, that completely erases all deleted information. Classic HDDs are safe from this, so all deleted data stay on HDD. Today, modern Western Digital SMR drives with TRIM are becoming a huge problem for digital forensic specialists. Is it possible to bypass it somehow? Let’s find the answer in this session.

10:30-12:30

German

T3K Forensics: Smarter als der Smartphone-Nutzer – wie KI-Technologie Ihre Arbeit unterstützt!

Participants will get insight into the practical investigation advantages of seemingly abstract AI technology. Together with the T3K trainers, they get to experience first-hand how Machine Learning algorithms work in their favor, and how they can best utilize the immense possibilities they offer. T3K will introduce some background information and then measure that against hands-on work on demo case data.

Prior to the workshop you will receive access to the online demo system to follow along 

13:30-15:30

German

Evidence Talks: Wie Sie mit SPEKTOR Kiosk Ermittlungsrückstände bei der Untersuchung digitaler Geräte minimieren

Learn how special customised triage solutions help you to get faster results and eliminate investigation backlogs.

25.09.2020

8:00-10:00

Language

TBD

TBD

10:30-12:30

German

Belkasoft: Neues revolutionäres Belkasoft DFIR-Produkt: Belkasoft Evidence Center X. 

Belkasoft is about to release its new solution for digital forensics and incident response: Belkasoft Evidence Center X. The new solution is a further development of the well-known BEC product and represents a significant improvement of the older product in many ways: ease of use, usability, accuracy of analysis details, extended support of iOS forensics and application analysis, reworked remote acquisition and others. Find out more about the many improvements Belkasoft has brought to this new DFIR suite.

Test licenses are available for users that have a Belkasoft dongle.

 

13:30-15:30

English

Amped: Hands-on Introduction to Video Forensics with Amped FIVE

Learn how to perform analysis and enhancements on image and video evidence using Amped FIVE. We will look at how FIVE can assist investigations from the acquisition of evidence through to preparing evidence for court. By the end of this session, you will be able to recognize and restore common issues with videos such as interlacing and motion blurring.