The Road to CEIC 2012 – Cyber Response Labs

Jessica Bair The “Road to CEIC 2012” is a series of blog posts on all things CEIC, before, during and after, from an insider’s point of view.

Welcome to the first post in our “Road to CEIC 2012” blog series, which is focused on our new Cyber Response lab track. As an eleven-year veteran of Guidance Software, Inc. and the developer of the EnCase Cybersecurity program, I have the honor of working with the Cyber Response Lab instructors to prepare for the hand-on labs.

The Cyber Response lab track at CEIC will cover everything from response methodology, to memory analysis, to attack attribution techniques and everything in between. Our instructors include seasoned incident response experts from Guidance Software, as well as visionary security practitioners such as Jaro Krett from Loews Corporation. This is the track for attendees looking to gain hands-on experience and tips to address the “now what?” that accompanies the inevitable breach.

This week marks an important milestone in our preparations. I just sent out the configuration information to the Cyber Response instructors, for the base builds of the student and instructor lab machines that Jamey Tubbs (@jameytubbs, Manager, GSI Training Houston) will be creating. We also set up an FTP site for the instructors to begin uploading their tools and materials to make each of their labs engaging and relevant.

Below is the Cyber Response labs schedule, and links to the labs’ descriptions and instructors’ biographies.

Jessica Bair
Senior Director, Curriculum Development
@jessicambair

CEIC 2012 – Cyber Response Labs

Monday
4:30 PM - 6:00 PM
Follow the Yellow Brick Evidence Trail
Tim Dillman, FishNet Security
Skill Level: All

Tuesday
8:00 AM - 9:15 AM
EnCase Cybersecurity: Automating Incident Response
Ambreesh Bhagtani, Guidance Software, Inc, Jason Fredrickson, Guidance Software, Inc
Skill Level: All

11:00 AM - 12:30 PM
The Search for the Holy Grail: Attribution
Tim Mather, KPMG
Skill Level: Intermediate

2:00 PM - 3:30 PM
Dynamic Malware Analysis of Emerging Threats
Paul Nichols, Harris Corporation, Brian Hussey, Harris Corporation
Skill Level: Intermediate

4:00 PM - 5:30 PM
Network Forensic Investigations of Hacking Incidents
Ondrej Krehel, IDT911, LLC, Jaro Krett, Loews Corp
Skill Level: Advanced

Wednesday
10:30 AM - 12:00 PM
EnCase Cybersecurity Command Center: SQL Databases Exposed!
Aaron Bennett, Guidance Software, Inc, Stephen Pascual, Guidance Software, Inc
Skill Level: Advanced

1:30 PM - 3:00 PM
Memory Analysis & Malware Triage
David Nardoni, General Dynamics Advanced Information Systems (PWC)
Skill Level: Intermediate

Thursday
8:30 AM - 10:00 AM
Collection and Analysis of RAM
Michael Webber, BitSec Global Forensics
Skill Level: Intermediate

No comments :

Post a Comment