ExtraHop accelerates into 2017 with new SVP of mar... » SEATTLE: ExtraHop has announced that Bryce Hein has joined the company as SVP of Marketing and will ... Opengear deal with Hardware Group extends European... » Piscataway, NJ: Opengear has announced a new distribution agreement with Hardware Group serving chan... Veracity delivers essential data paper at the San ... » Prestwick: Veracity takes a leading slot in delivering a Paper explaining the critical differences w... Veracity to showcase expanded portfolio at Inters... » Prestwick: Veracity reflects its significant growth in the Middle East by announcing an enlarged com... IPSecurityCenter to help protect citizens at the... » CNL Software has announced that its award-winning technology will be utilized as part of the multi-a... Pulse Secure certified for U.S. Department of Defe... » SAN JOSE, CALIF: Pulse Secure has announced that Pulse Connect Secure 8.2 and Pulse Policy Secure 5.... ExtraHop predicts 2017 trends in IT, security an... » UK: ExtraHop has announced its top predictions for enterprise IT in 2017. Based on insight from cust... VTech takeover: Snom stays Snom » Berlin: Now being part of VTech, leading manufacturer of professional business IP phones, Snom Techn... Secure I.T. Environments delivers challenging Da... » London UK: Secure I.T. Environments Ltd has announced the completion of a new internal data centre f... TDSi’s new GARDiS range grabbed visitors' attent... » Poole: Integrated security manufacturer TDSi’s new range of GARDiS software was the star attraction ...

CLICK HERE TO

Advertise with Vigilance

Got News?

Got news for Vigilance?

Have you got news/articles for us? We welcome news stories and articles from security experts, intelligence analysts, industry players, security correspondents in the main stream media and our numerous readers across the globe.

READ MORE

Subscribe to Vigilance Weekly

Information Security Header

Prague to host first edition designed to test digital forensics and response skills

UK: SANS Forensics Prague 2013, Europe’s largest dedicated Digital Forensics, Incident Response and Training event will host a new version of the popular NetWars tournament designed to test digital forensics skills.

 

As part of the week-long event which begins on the 6th of October with the 4th annual European Digital Forensics and Incident Response Summit (DFIR), competitors will run challenges across five levels of increasing difficulty. “You can think of it as a cross between CSI and Survivor,” says Rob Lee, SANS Fellow and the author of this modified NetWars session which is expected to attract around 70 competitors.

Lee conducted a test run of the format at last year’s events with a much smaller group and the feedback has been instrumental in creating the new session. “We are allowing competitors to bring and use any tools they want,” says Lee, “Having a great golf club won’t make you Tiger Woods but we recognise that having tools that you are familiar with that match your thought process will make the challenge closer to real world engagement.”

The updated course has focus on questioning the participants to solve challenges in different ways. “For example, at the harder difficulty levels there may be no tool that can even decode an artefact and requires participants to go into HEX editors.” says Lee.

The competition uses time and accuracy criteria to award points with the top 6 places recognised for “Gold Coin” awards and the overall winner receiving an iPad mini. “If you speak to most of the competitors, it is not all about the winning,” explains Lee, “NetWars allow participants to learn more about their own strengths and weakness and discover where they may progress as InfoSec professionals and practitioners.” Participation is open to any student taking a course during the SANS Prague event.

SANS Forensics Prague welcomed a capacity audience last year and adds a brand new course to the 2013 roster with FOR526: Windows Memory Forensics In-Depth taught by Jess Garcia and Jesse Kornblum. This In-Depth course is critical for any serious investigator who wishes to tackle advanced forensic and incident response cases.

Lee will also be teaching the FOR508: Advanced Computer Forensic Analysis and Incident Response course which has been updated to reflect a dramatic increase in sophisticated attacks against nearly every type of organization. Economic espionage in the form of cyber-attacks, also known as the Advanced Persistent Threat (APT), has proven difficult to suppress and the course is aimed at meeting these issues.

FORENSICS 610: Reverse-Engineering Malware will be taught by Lenny Zeltser, a GIAC Security Expert (GSE), Senior Faculty Member at the SANS Institute and Incident handler at the Internet Storm Center. This is only the second time that US-based Zeltser, the primary author of this popular course, has taught it in Europe.

The event will also host the FOR408: Computer Forensic Investigations - Windows In-Depth course taught by Chad Tilbury and Christian Prickaerts. The 6 day course focuses on the critical knowledge of the Windows Operating System that every digital forensic analyst needs to investigate computer incidents successfully.