Welcome To RCFG
HTCIA Mid-Atlantic and RCFG are pleased to invite you to our next Joint Chapter Meeting.
May 25, 2017
1:00pm to 4:30pm
George Mason University
Johnson Center, 3rd Floor – Room E
4400 University Dr
Fairfax VA 22032
*The nearest available visitor parking can be found at the Mason Pond Parking Deck.
1:00pm to 3:00pm BlackBag Lab presented by Hal Harris (please bring your own laptop for hands-on portion)
3:00pm to 3:30pm Networking Break
3:30pm to 4:30pm Methodology for Dealing with Mobile Data that is Missed by Commercial Tools presented by Jessica Hyde
presented by Hal Harris
Learn about FSEvents, memory image analysis, and iOS SQLite queries in this interactive, hands-on lab featuring BlackLight. In order to participate in the hands-on portion, please bring your own laptop.
Methodology for Dealing with Mobile Data that is Missed by Commercial Tools
presented by Jessica Hyde
Every day new mobile applications hit the App Store and Google Play. These new apps contain chat functions or other storage that can be crucial evidence in a case. Often these apps are not yet supported by commercial tools. This class will discuss methodologies for discovering and parsing data from unsupported applications. We will go through the methodologies utilized to discover, test, find, parse, and script to obtain forensic evidence dealing with new applications. The presentation will outline the process used for two game applications that had chat functionality not supported by commercial tools.
RCFG, Inc. is a non-profit Virginia corporation supporting the training needs of the Law Enforcement and digital forensic communities. Membership is FREE and is comprised of government employees and contractors employed by Law Enforcement (and supporting) agencies with the mission of combating cyber crime.
RCFG meetings are held every other month, in and around the Washington DC Metropolitan area, and are often held concurrently with the HTCIA Mid-Atlantic Chapter meetings.