26. September
| 26. September | Schwarze Halle | |||
| Shuttle Ankunft 08:45 Uhr | ||||
| 8:30 – 9:15 | Registrierung | |||
| 9:20 – 9:55 | Anniversary Keynote | |||
| 10:00 – 10:45 |
(P) Unsere Lösungen in der Theorie und im Einsatz – von mh Service, Intersoft Consulting und PP Bayreuth (GER) | |||
| 10:45 – 11:05 | Kaffeepause | |||
| 11:05 – 11:50 |
(P) Overcoming additional layers of device security | |||
| 11:55 – 12:40 |
(P) Integrity and Authenticity of images and videos with Amped Authenticate | |||
| 12:40 – 14:15 | Mittagessen | |||
| 14:15 – 15:00 |
(P) The power of collaboration in modern IT Forensics using Exterro´s FTK (8.0) | |||
| 15:05 – 15:50 |
(P) Unlocking mobile phones and password protected evidence on computers | |||
| 15:50 – 16:10 | Kaffeepause | |||
| 16:10 – 17:10 |
(WS) Oxygen Forensics, new features and products | |||
| Pause | ||||
| 18:30 – Open end | Networking Dinner + Jubiläums-Party | |||
| Shuttle Abfahrt: 22:00 + 00:00 Uhr | ||||
| 26. September | Schlosserei | |||
| Shuttle Ankunft 08:45 Uhr | ||||
| 8:45 – 9:30 | Registrierung | |||
| 9:30 – 9:55 | ||||
| 10:00 – 10:45 |
(P) Belkasoft X v.2.1: What’s new in one of the Top-3 DFIR Commercial Tools | |||
| 10:45 – 11:05 | Kaffeepause | |||
| 11:05 – 11:50 |
(P) Unisoc (Spreadtrum) CPU platform in modern mobile devices | |||
| 11:55 – 12:40 |
(P) NIMBUS, your Forensic Case and Quality Management System by Ian O’Callaghan | |||
| 12:40 – 14:15 | Mittagessen | |||
| 14:15 – 15:00 |
(P) The Detego Advantage: Rapid triage for computers, phones, loose media and more | |||
| 15:05 – 15:50 |
(P) Translate alt socials into actionable data | |||
| 15:50 – 16:10 | Kaffeepause | |||
| 16:10 – 17:10 | ||||
| Pause | ||||
| 18:30 – Open end | Networking Dinner + Jubiläums-Party | |||
| Shuttle Abfahrt: 22:00 + 00:00 Uhr | ||||
| 26. September | Trainingsraum | |||
| Shuttle Ankunft 08:45 Uhr | ||||
| 8:45 – 9:30 | Registrierung | |||
| 9:30 – 9:55 | ||||
| 10:00 – 10:45 |
(P) Evidence and Media Case Handling with OpenText’s Law Enforcement Media Analysis | |||
| 10:45 – 11:05 | Kaffeepause | |||
| 11:05 – 11:50 |
(P) Tools, collaboration and education for law enforcement investigators | |||
| 11:55 – 12:40 |
(P) Schwedische Polizei – Zusammenarbeit auf internationaler und nationaler Ebene: gewonnene Erkenntnisse (GER) | |||
| 12:40 – 14:15 | Mittagessen | |||
| 14:15 – 15:00 |
(P) Cinderella of modern investigations: How to Deanonymize a Suspect with OSINT | |||
| 15:05 – 15:50 |
(P) Investigating Mobile Phones, Smartwatches, & Clouds using MOBILedit Forensic | |||
| 15:50 – 16:10 | Kaffeepause | |||
| 16:10 – 17:10 |
(WS) RansomWAR: Wirtschaft schützen durch Ransomware Entschlüsselung – Hinter den Kulissen aktueller Fälle (GER) | |||
| Pause | ||||
| 18:30 – Open end | Networking Dinner + Jubiläums-Party | |||
| Shuttle Abfahrt: 22:00 + 00:00 Uhr | ||||
| Hof |
| LIVE DEMOS MOBILE LABORE Schnellere Ermittlungsergebnisse dank mobiler IT-Forensik-Labore – Erleben Sie bei Live-Demos die unterschiedlichen Konfigurationen für verschiedene Anwendungen. |
27. September
| 27. September | Schwarze Halle | |||
| Shuttle Ankunft: 10:00 Uhr | ||||
| 10:00 – 10:30 | Registrierung, Networking | |||
| 10:30 – 12:00 | 
(WS) FTK 8.0 – Take your digital forensic investigations to the next level. * Eigene laptop benötigt! |
|||
| 12:00 – 13:30 | Mittagessen | |||
| 13:30 – 15:00 |
(WS) Amped Replay and Amped FIVE: Improving Video Forensics Efficiency and Expertise – from First Responders to Analysts |
|||
| 15:00 – 15:20 | Kaffeepause | |||
| 15:20 – 16:20 |
(WS) Unique PC-3000 Mobile PRO low-level access technology for recovering data on locked, non-bootable and damaged Android-based smartphones |
|||
| 16:20 | Networking Drinks | |||
| Shuttle Abfahrt: 17:30 Uhr | ||||
| 27. September | Schlosserei | |||
| Shuttle Ankunft: 10:00 Uhr | ||||
| 10:00 – 10:30 | Registrierung, Networking | |||
| 10:30 – 12:00 |
(WS) Belkasoft X v.2.1: Practical Workshop | |||
| 12:00 – 13:30 | Mittagessen | |||
| 13:30 – 15:00 |
(WS) Accelerating Investigations: An Interactive Workshop on Detego Global’s Lightning-Fast DFIR Tools | |||
| 15:00 – 15:20 | Kaffeepause | |||
| 15:20 – 16:20 |
(WS) How to deanonymize a drug seller´s account through OSINT | |||
| 16:20 | Networking Drinks | |||
| Shuttle Abfahrt: 17:30 Uhr | ||||
| 27. September | Trainingsraum | |||
| Shuttle Ankunft: 10:00 Uhr | ||||
| 10:00 – 10:30 | Registrierung, Networking | |||
| 10:30 – 12:00 |
(WS) NIMBUS Demonstration for Forensics by George Carr | |||
| 12:00 – 13:30 | Mittagessen | |||
| 13:30 – 15:00 |  (WS) Investigating Mobile Phones, Smartwatches, & Clouds using MOBILedit Forensic | |||
| 15:00 – 15:20 | Kaffeepause | |||
| 15:20 – 16:20 |
(WS) Running an Investigation on LEMA | |||
| 16:20 | Networking Drinks | |||
| Shuttle Abfahrt: 17:30 Uhr | ||||
| Hof |
| LIVE DEMOS MOBILE LABORE Schnellere Ermittlungsergebnisse dank mobiler IT-Forensik-Labore – Erleben Sie bei Live-Demos die unterschiedlichen Konfigurationen für verschiedene Anwendungen. |
(P) – Präsentation
(WS) – Workshop
Information : Von und nach Kandel, Herxheim-Hayna, Landau und Jockgrim wird morgens und abends ein kostenfreier Shuttle-Bus zur Verfügung gestellt.
Unser Paladin, der „DEVIL“ für intersoft consulting! 
Wir präsentieren stolz den neuesten PALADIN: Ein hochmodernes Labor für IT-Forensik und Incident Response, maßgeschneidert für intersoft consulting. Erleben Sie live am FT-Day, wie digitale Beweismittel direkt vor Ort gesichert und analysiert werden können. Seien Sie dabei und entdecken Sie die Zukunft der forensischen Untersuchungen!