03 December 2009 (Thursday)
Police Officer's Club, 28, Hung Hing Road, Causeway Bay, Hong Kong

08:30 – 09:00

REGISTRATION

09:00 – 10:30
Track 1 - Mobile Forensics

Session 1 - New developments in Mobile Device Forensics

Kevin Mansell

Track 2 - Live Forensics

Session 1 - Live Forensics and Incident Response using Phoenix - a brand new FOSS Live CD called Phoenix which will be officially released by Drew Fahey at the Conference

Andrew Fahey

Track 3 - Misc

Session 1 - Deconstructing e-mail database structures. Possibly one of the least understood aspects of digital forensics is explained in this workshop.

Peter Mercer

10:30 – 11:00

Coffee Break

11:00 – 12:30

 

Track 1 - Mobile Forensics

Session 1 (cont.)

Kevin Mansell

Track 2 - Live Forensics

Session 1 (cont.)

Andrew Fahey

Track 3 - Misc

Session 1 (cont.)

Peter Mercer

12:30 – 14:00

Lunch Break

14:00 – 15:30

 

Track 1 - Mobile Forensics

Session 2 - Mobile Device Forensics - CelleBrite Physical Analyser, XACT & Flasher Boxes (Are We Closer to a True CellPhone Forensic Solution)

John Thackray

Track 2 - Live Forensics

Session 2 - Enabling Incident Response with F-Response

Matthew Shannon

Track 3 - Misc

Session 2 - Developing an acquisition & analysis platform for the future

Andrew Rosen

15:30 – 16:00

Coffee Break

16:00 – 17:30

 

Track 1 - Mobile Forensics

Session 2 (cont.)

John Thackray

Track 2 - Live Forensics

Session 2 (cont.)

Matthew Shannon

Track 3 - Misc

Session 2 (cont.)

Andrew Rosen