Download - PFIC - Paraben's Forensic Innovations Conference

Forensics Track
Sunday, November 4th, 2012
Time: Sunday, 9:00 AM – 10:00 AM
Track: Forensics Track
Room: Interlaken
Presenter: Ryan Washington, AR-Forensics
Title: The Art to the Science - Quick Forensics
This presentation (originally titled “Nintendo Forensics Saves Lives”) will go over methodologies, case scenarios,
and pros and cons of using commercial software and freeware. It will cover some aspects of utilizing
digital profi ling to correctly assess the target and their digital equipment.
Time: Sunday, 10:30 AM – 11:30 AM
Track: Forensics Track
Room: Interlaken
Presenter: Jeff Ross, FBI
Title: Case Study: Antonio Cardenas - Distributor and Manufacturer of Child Pornography
Come and review a case study on a pedophile arrested and prosecuted in Salt Lake City. We will review the
investigation of Antonio Cardenas. He was an individual responsible for manufacturing and distributing one
of the most prolifi c series of child pornography today. The presentation will discuss the investigation, apprehension
and prosecution of Cardenas.
Time: Sunday, 12:30 PM – 2:00 PM
Track: Forensics Track
Room: Interlaken
Presenter: Mike Menz, HP
Title: Tips and Tricks for Forensics and Investigations
This class is a montage of techniques and tools to solve current problems in investigations, eDiscovery and
forensics cases. A CD will be provided with most of the items talked about in the class. The attendee will
learn of new and current solutions to a variety of problems faced day to day by an investigator in the investigations,
eDiscovery and forensics fi elds. Resources on the web will be shown and how their unique use, can
solve investigative problems. Everything from researching suspects to cracking hard drive passwords will be
discussed and shown. Mike has taught this class at almost every HTCIA conference since 1997. It has always
been standing room only and has been rated as one of the top information and tools class given.
Time: Sunday, 2:00 PM – 3:30 PM
Track: Forensics Track
Room: Interlaken
Presenter: John J Carney, Esq., Carney Forensics
Title: Visualization of Digital Forensic Data
Digital evidence is usually presented today as narrative and numbers accompanied by a stream of bits and
bytes in computer forensic reports that are at best sorted into buckets of similar items. For example, mobile
phone evidence is presented such that call logs appear in one section split into inbound, outbound, and
missed calls. Text messages appear elsewhere split into inbound and outbound messages. And the phone’s
address book appears yet somewhere else. This primitive and fragmented approach at production hides or
makes opaque the evidence story that attorneys desperately need to develop a theory of the case for presentation
to juries to win at trial. Technically, forensics data is made available to attorneys and their clients,
but often this evidence is so diffi cult to interpret and understand that they derive little, if any, value from it.
Why? Because many digital forensic examiners report their fi ndings one-dimensionally and out of context.
Unfortunately, legal professionals, who are not technologists, cannot relate to it. They miss the substance
and the import of the evidence’s meaning and its ability to tell the story of the case.