Agenda-2024 – FT-Day

25. September	Schwarze Halle	Schlosserei	Trainingsraum
	Ankunft Shuttle Bus
8:15 – 9:00	Registrierung, Welcome Coffee
9:00 – 10:15	Keynote: „Cybercrime – von Randerscheinung zu Prime-Crime“ (Ralf Michelfelder, ehem. Präsident des LKA BW)
10:20 – 11:00	Erleben Sie mit uns live die Revolution im Bereich Threat Hunting (P) – Teil 1	Using the PC-3000 Technological Mode approach to recover data from SSDs based on native USB controllers (P)	Unlocking the Android keystore (P)
11:05 – 11:45	Erleben Sie mit uns live die Revolution im Bereich Threat Hunting (P) – Teil 2	Unveiling Detego’s Game-Changing Features: Transform Your Digital Forensics (P)	What’s new in Encase and the Tableau range (P)
11:45 – 12:05	Kaffeepause
12:05 – 12:45	Transformation des Handlings digitaler Beweise mit FTK (8.1) (P)	Effizienz in der Videoauswertung – Wie Amped Replay hilft, die Ermittlungszeiten zu verkürzen und gleichzeitig die Stringenz in der Beweissicherung stärkt (P)	Vehicle Forensics: Overcoming Challenges with Advanced Acquisition Techniques (P)
12:50 – 13:30	Recovering Encrypted Evidence with Passware (P)	Smartwatches: Exploring Forensic Possibilities and Limitations of the most Popular Wearables (P)	iOS Acquisition Methods: from Backups to Full File System Extraction (P)
13:30-14:45	Mittagessen
14:45 – 15:25	Remote Access Forensics: Knowing Who Accessed The Computer (P) – Brian Carrier	Geolocation of Human Trafficking Images: A Perceptual Colour-based Image Retrieval Approach (P)	Advanced Analysis of PCAP and Phone data in Tovek Tools (P)
15:30 – 16:10	Threat Hunting in Action!	Make seizure decisions in seconds in child abuse cases. (P)	Maschinelles Lernen verstehen: Grundlagen der KI (P)
16:10-16:30	Kaffeepause
16:30 – 17:30	Introduction of the Artefact Explorer in EnCase & the new TX2. (WS)	Understanding Password Protection and the Decryption Workflow. (WS)	Connecting dots from multiple sources using Tovek Tools. (WS)
18:30 – open end	Networking Dinner
22:30	Abfahrt Shuttle Bus

26. September	Schwarze Halle	Schlosserei	Trainingsraum
	Ankunft Shuttle Bus
9:15 – 9:30	Welcome Coffee
9:30 – 11:00	Exterro FTK 8.1 Training (WS) – (Eigenes Laptop benötigt!) Teil 1 (DE)	Capture the flag with Oxygen Forensics- WS (Eigenes Laptop benötigt!) Teil 1 Hier registrieren!	Fast-track investigations with Detego Global’s award-winning tools -(Eigenes Laptop benötigt!) (WS)
11:00-11:20	Kaffeepause
11:20 – 12:50	Exterro FTK 8.1 Training (WS) – (Eigenes Laptop benötigt!) Teil 2 (DE)	Capture the flag with Oxygen Forensics (Eigenes Laptop benötigt!) Teil 2 Hier registrieren!	Investigating a Ransomware Case Using Cyber Triage (Eigenes Windows Laptop benötigt!) (WS) – Brian Carrier
12:50-14:15	Mittagessen
14:15 – 15:15	Recovering Encrypted Evidence with Passware (P)	Introduction to Cyacomb 3.0. The gold standard in rapid triage for child abuse cases. (Eigenes Laptop benötigt!) (WS)	PC-3000 Mobile PRO solutions for flagship Mediatek CPU chipsets. (WS)
ab 15:15	Networking Drinks
16:00	Abfahrt Shuttle Bus