Digital forensics involves more than just examining hard drives! (We'll leave the bodies to the other type of forensics.) In this hands-on workshop, we will start with an overview of the discipline of digital forensics and then dive into analysis: examining drive images, memory captures, and network traffic. The "evidence" we will discover will be part of a fictitious incident and will tie it all together. Participants will try to figure out who did it!
Samples and detailed preparation instructions will be provided prior to class.