Lab Sessions

5 groups of children and their parents and teachers will visit the conference. The Canadian organization www.livewwwires.com will let them play one of their specialized awareness-games. While the kids are working on the game their parents will get special briefings on the good and the bad things of the internet. Awareness has been adopted by the conference-organization as an important item for this conference. Thanks to Dutch politics and public organizations this topic will be an important additional piece of the conference.

Handheld Forensics Processing the Mobile
Handheld forensics is the hot topic in the world of digital forensics since almost every suspect potentially can have this digital fingerprint on them. Learn what to do to maximize this fingerprint and learn how the evidence can work for you. Sample data of different mobile devices will be examined. Review different sources of evidence from the device to the tower data that can guide you to the position of the suspect.

P2 Forensics Processing through the Mass Data
As computer storage becomes less expensive, you are more likely to be required to process terabytes of data in any given forensic exam. This can be a daunting task. We will walk you through a typical exam of a large capacity system using Paraben’s P2 Forensic Process.

Investigating Malicious Code and Steganography
The rapid evolution of malicious software applications is directly impacting computer forensic investigators today. This presentation/demonstration will report on the evolution of malicious software and steganography. A live investigation will be performed with audience participation.

FTK 2.0
This session will explore the differences between FTK 2.0 and FTK 1.X. 
Attendees will navigate the interface in a hands-on environment while learning about key features such as:
•  File filtering within the FTK 2.0 relational database
•  Building Cases with FTK 2.0 in a multi-user environment
•  New data carving and file recognition technology
•  Using multi-threaded processing to gain immediate data access

Endpoint Security - Onzichtbare infiltratie
Doordat kwaadwillige activiteiten zich vormen tot gerichte, criminele aanvallen en de toenemende mate van onzichtbaarheid van infiltraties aan de orde van de dag is, is een proactieve beveiliging van het 'endpoint' nu zeer belangrijk. Dit is de enige manier van adequate beveiliging tegen deze onbekende indringers.
Beveiliging tegen kwaadwillige code, het stoppen van ongeautoriseerd gebruik van applicaties en het behouden van de integriteit van de 'endpoints' zijn nu van levensbelang. Hiermee worden enorme kostenbesparingen bereikt en krijgt het IT-management meer controle over en inzicht in hun systemen. Deze strategie is de 'next level in IT security'. Met de toenemende aanvallen op applicatieniveau is een effectief beheer van de desktop-populatie en de serveromgeving vereist om de risico's te minimaliseren en de efficiëntie van de helpdesk en de administratieve functies te verbeteren.

Programma:
• Bestrijding van onzichtbare bedreigingen
• Waar komen vandaag de dag bedreigingen vandaan?
• Bedreigingen vandaag de dag?
• Gebruikersgedrag
• De huidige situatie
• Richtlijnen uit de praktijk
• Het verkrijgen van 'Next Level in IT Security'
• Securing Endpoints on a Windows based Enterprise