26. September
| 26. September | Black Hall | |||
| Shuttle arrival 08:45 am | ||||
| 8:30 – 9:15 | Registration | |||
| 9:20 – 9:55 | Anniversary Keynote | |||
| 10:00 – 10:45 |
(P) Unsere Lösungen in der Theorie und im Einsatz – von mh Service, Intersoft Consulting und PP Bayreuth (GER) | |||
| 10:45 – 11:05 | Coffee break | |||
| 11:05 – 11:50 |
(P) Overcoming additional layers of device security | |||
| 11:55 – 12:40 |
(P) Integrity and Authenticity of images and videos with Amped Authenticate | |||
| 12:40 – 14:15 | Lunch | |||
| 14:15 – 15:00 |
(P) The power of collaboration in modern IT Forensics using Exterro´s FTK (8.0) | |||
| 15:05 – 15:50 |
(P) Unlocking mobile phones and password protected evidence on computers | |||
| 15:50 – 16:10 | Coffee break | |||
| 16:10 – 17:10 |
(WS) Oxygen Forensics, new features and products | |||
| Break | ||||
| 18:30 – Open end | Networking dinner + anniversary party | |||
| Shuttle departure: 22:00 + 00:00 | ||||
| 26. September | Metalworking Hall | |||
| Shuttle arrival 08:45 am | ||||
| 8:45 – 9:30 | Registration | |||
| 9:30 – 9:55 | ||||
| 10:00 – 10:45 |
(P) Belkasoft X v.2.1: What’s new in one of the Top-3 DFIR Commercial Tools | |||
| 10:45 – 11:05 | Coffee break | |||
| 11:05 – 11:50 |
(P) Unisoc (Spreadtrum) CPU platform in modern mobile devices | |||
| 11:55 – 12:40 |
(P) NIMBUS, your Forensic Case and Quality Management System by Ian O’Callaghan | |||
| 12:40 – 14:15 | Lunch | |||
| 14:15 – 15:00 |
(P) The Detego Advantage: Rapid triage for computers, phones, loose media and more | |||
| 15:05 – 15:50 |
(P) Translate alt socials into actionable data | |||
| 15:50 – 16:10 | Coffee break | |||
| 16:10 – 17:10 | ||||
| Break | ||||
| 18:30 – Open end | Networking dinner + anniversary party | |||
| Shuttle departure: 22:00 + 00:00 | ||||
| 26. September | Training Room | |||
| Shuttle arrival 08:45 am | ||||
| 8:45 – 9:30 | Registration | |||
| 9:30 – 9:55 | ||||
| 10:00 – 10:45 |
(P) Evidence and Media Case Handling with OpenText’s Law Enforcement Media Analysis | |||
| 10:45 – 11:05 | Coffee break | |||
| 11:05 – 11:50 |
(P) Tools, collaboration and education for law enforcement investigators | |||
| 11:55 – 12:40 |
(P) Schwedische Polizei – Zusammenarbeit auf internationaler und nationaler Ebene: gewonnene Erkenntnisse (GER) | |||
| 12:40 – 14:15 | Lunch | |||
| 14:15 – 15:00 |
(P) Cinderella of modern investigations: How to Deanonymize a Suspect with OSINT | |||
| 15:05 – 15:50 |
(P) Investigating Mobile Phones, Smartwatches, & Clouds using MOBILedit Forensic | |||
| 15:50 – 16:10 | Coffee break | |||
| 16:10 – 17:10 |
(WS) RansomWAR: Wirtschaft schützen durch Ransomware Entschlüsselung – Hinter den Kulissen aktueller Fälle (GER) | |||
| Break | ||||
| 18:30 – Open end | Networking dinner + anniversary party | |||
| Shuttle departure: 22:00 + 00:00 | ||||
| Courtyard |
| LIVE DEMOS - MOBILE LABORATORIES Faster investigation results thanks to mobile IT forensic laboratories. Live demos of different configurations for different applications. |
27. September
| 27. September | Black Hall | |||
| Shuttle arrival: 10:00 a.m. | ||||
| 10:00 – 10:30 | Registrierung, Networking | |||
| 10:30 – 12:00 | 
(WS) FTK 8.0 – Take your digital forensic investigations to the next level. Please bring your laptop! |
|||
| 12:00 – 13:30 | Lunch | |||
| 13:30 – 15:00 |
(WS) Amped Replay and Amped FIVE: Improving Video Forensics Efficiency and Expertise – from First Responders to Analysts |
|||
| 15:00 – 15:20 | Coffee break | |||
| 15:20 – 16:20 |
(WS) Unique PC-3000 Mobile PRO low-level access technology for recovering data on locked, non-bootable and damaged Android-based smartphones |
|||
| 16:20 | Networking Drinks | |||
| Shuttle departure: 5:30 pm | ||||
| 27. September | Metalworking Hall | |||
| Shuttle arrival: 10:00 a.m. | ||||
| 10:00 – 10:30 | Registrierung, Networking | |||
| 10:30 – 12:00 |
(WS) Belkasoft X v.2.1: Practical Workshop | |||
| 12:00 – 13:30 | Lunch | |||
| 13:30 – 15:00 |
(WS) Accelerating Investigations: An Interactive Workshop on Detego Global’s Lightning-Fast DFIR Tools | |||
| 15:00 – 15:20 | Coffee break | |||
| 15:20 – 16:20 |
(WS) How to deanonymize a drug seller´s account through OSINT | |||
| 16:20 | Networking Drinks | |||
| Shuttle departure: 5:30 pm | ||||
| 27. September | Training Room | |||
| Shuttle arrival: 10:00 a.m. | ||||
| 10:00 – 10:30 | Registrierung, Networking | |||
| 10:30 – 12:00 |
(WS) NIMBUS Demonstration for Forensics by George Carr | |||
| 12:00 – 13:30 | Lunch | |||
| 13:30 – 15:00 |  (WS) Investigating Mobile Phones, Smartwatches, & Clouds using MOBILedit Forensic | |||
| 15:00 – 15:20 | Coffee break | |||
| 15:20 – 16:20 |
(WS) Running an Investigation on LEMA | |||
| 16:20 | Networking Drinks | |||
| Shuttle departure: 5:30 pm | ||||
| Courtyard |
| LIVE DEMOS - MOBILE LABORATORIES Faster investigation results thanks to mobile IT forensic laboratories. Live demos of different configurations for different applications. |
(P) - Presentation
(WS) – Workshop
A free shuttle bus will be provided to and from Kandel, Herxheim-Hayna, Landau and Jockgrim in the mornings and evenings.
Unser Paladin, der „DEVIL“ für intersoft consulting! 
A state-of-the-art laboratory for IT forensics and incident response, customized for Intersoft Consulting. Join us live at the FT-Day to witness how digital evidence can be secured and analyzed on-site. Be a part of it and explore the future of forensic investigations!