Who should attend CARCUR?
Computer Forensic Investigators
Cell Phone Forensic Investigators
Coporate Security Officers
Law Enforcement
Private Investigators
IT Security Consultants
Prosecutors
Police Officers Anyone who wants to expand their knowledge of digital and computer forensics investigations
Banks/Security Companies, Financial industry University Professors/Students CEO/CIO/Corporate Directors
By most estimates, 90% of legal evidence resides in computer systems, rather than on paper. Cases involving corporate trade secrets, personal and commercial disputes, employment discrimination, misdemeanor and felony crimes, and personal injury can be won or lost solely with the introduction of recovered e-mail messages and other electronic files and records!
Join others who already registered. Like: CORE NV, UTS, Caribbean Forensic, MOT, Law Enforcement and more...!! "Attend the Conference"!! Register NOW!!
THE "CARCUR COMPUTER & DIGITAL FORENSICS CONFERENCE" IS THE "DON'T MISS" EVENT OF THE YEAR FOR COMPUTER FORENSICS EXPERTS, LAW ENFORCEMENT, Civil Litigation Companies, Defence Lawyers, IT Companies, CEO, HRM, LEGAL Officer .....
Conference Program
DAY 1 - Nov 18 2009
8:00 AM - 9:00 AM Registration
9:00 AM - 9:30 AM Official Opening
9:30 AM - 10:15 AM Computer Forensics in Civil Litigation This presentation will give instruction on how computer forensics can be used in civil litigation. It discusses the differences between civil and criminal matters, as well as addressing dealing with attorneys, courts, judges, and juries. This is a very informative lecture for anyone in the private sector or thinking about branching into this area. Presenter:Kevin J. Ripa
10:15 AM - 10:45 AM Coffee Break
10:45 AM - 11:30 AM Web Page Reconstruction Online activity. It is a ubiquitious part of computer use, but is amazingly misunderstood by many investigators. This presentation will address how web pages work, how they get to be on your computer, how they are stored, and most importantly, how to rebuild them without expensive software! In many investigations, the internet artifacts can be something much different in context than they appear to be when they are viewed out of context. Presenter:Todd Shipley
11:30 AM - 12:15 PM Creating and Accessing Forensic Images Using various forensic imaging software applications, attendees will be exposed to the various formats of forensic images, the software applications used to access them, and the limitations of each type of forensic image. Presenter:Charles Faulk
12:15 PM - 1:45 PM Lunch
2:00 PM - 2:45 PM Computer Forensics - A Defence Perspective This presentation focuses on how a criminal or civil forensics case is approached from the defense aspect. This is typically a frowned upon area of computer forensics, but it shouldn't be. Unlike many "expert" fields, a computer forensics expert analysis cannot be "bought". The data doesn't lie. We merely interpret and report what exists. Find out the most common mistake made by LE and prosecutors. This is not a lecture on how to get defense work, or how to manipulate the system. This is a PRO police expose on how the defense of computer forensics is approached and facilitated, so LE and prosecutors can prepare a better case. This lecture is a "must attend" for law enforcement and prosecutors alike. Presenter:Kevin J. Ripa
2:45 PM - 3:30 PM Virtual Forensics Using virtual applications to assist in digital forensics examinations. Learn how to boot a forensic image or physical hard drive into a virtual environment. Also learn how to acquire virtual machines forensically for examination. Presenter:Charles Faulk
3:30 PM - 4:00 PM Coffee Break
4:00 PM - 4:45 PM Black bag Forensics No, this isn't a "breaking the law" presentation. Black bag forensics applies more to the acquisition process than the analysis. Collecting an image at a residence where time is limited to the spouse being away for "a few hours". Going to a business in the wee hours of the morning to collect an image without workers being aware of it. Working with law enforcement to collect images from computers in residences under cover and under time constraint. Presenter: Kevin J. Ripa
6:00 PM - 8:00PM Social & Business Networking Event Location: Renaissance Curacao Resort & Casino
DAY 2 - Nov 19 2009
9:00 AM - 9:45 AM
Fly Away Kits Many of us get quite used to being surrounded by an entire lab full of equipment when we are conducting an acquisition and analysis. But what about when you have to fly 1000 miles to gather the evidence, and must create your image "on site"? There is nothing more frustrating that showing up with the wrong equipment, wrong adapters, etc. It makes you look unprofessional, and costs money. This presentation will explore tried and proven fly away kits, their contents, hands on examples, as well as what to have, why to have it, where to get it, and how to keep it compact. As a bonus, attendees will see first hand, a forensic computer in a briefcase. Not the FRED products, but a full blown, "as-powerful-as-the-lab" unit with all the bells and whistles, no compromise on speed or attachments, and most importantly, no $6000.00 price tag! Presenter:Kevin J. Ripa
9:45 AM - 10:30 AM Investigating Evidence Spoliation Tools and techniques investigators can use to identify remnants of electronic evidence spoliation as well as the applications suspects are using. The focus of this lecture will be on data scrubbing and will include case examples. Presenter: Mark Spencer
10:30 AM - 11:00 AM Coffee Break
11:00 AM - 11:45 Raw Data Carving
You have used all of the utilities in EnCase, FTK, and other programs to carve files from unallocated file space. Do you think you have found everything? If you answered yes, guess again. The only way that carving utilities are able to recover deleted data automatically is through file header and footer identification, and this recovers an intact file. Presenter:Todd Shipley
11:45 AM Conference Closing
Workshops November 19 2009
1:30 PM - 5:00 PM Creating Stellar Reports You have collected the evidence. You have spent countless hours analyzing it. you have found the smoking guns. But if you can't communicate all of this effectively, it will have been in vain. How exactly, do you show a video in a written report? In many cases, the written report is all the client sees for the big bill they have had to pay. This workshop will show you how to create a stellar report in an electronic format that will wow your clients. Instructor: Kevin J. Ripa
1:30 PM - 5:00 PM
Internet Forensics Investigations Learn how to conduct successful Internet Forensics Investigations in this 3 hour workshop. The tools and techniques demonstrated will include using advanced DNS (Domain Name System) queries, assumed identities, onion routing, email and document beacons, website archiving, and more.
Instructor: Mark Spencer
3:00 PM - 3:30 PM Coffee Break
Certificate All workshops participants will get a Certificate signed by the workshop instrcutor
WEBCASE - Investigative Products - Click for info
WebCase: Designed to take you from an investigation requiring online evidence collection, all the way through a court trial.
Computer Forensics The field of computer forensics involves the locating, collecting, analyzing and authenticating of potential evidence located in computers and digital media storage devices. This type of information can be very helpful to individuals and companies involved in various criminal or civil litigation or other commercial or personal situations.
