Greenwave Systems: “The Internet of Things is no... » London, UK: Learning from the past, taking security seriously and protecting the consumer must be at... First of the UK’s new nuclear deterrent subma... » Defence Secretary Michael Fallon  yesterday announced that, to mark Trafalgar Day, Her Majesty the Q... Pulse Secure launches promotion to simplify movi... » SAN JOSE, CALIF.: Pulse Secure has announced “Secure Access NOW” - a major new upgrade program to he... Unisys Appointment Manager moves to Microsoft Az... » LONDON: Unisys Corporation has announced that its Appointment Manager (AM) solution for financial se... WP engine brings improved SEO and Security to 50... » LONDON, UK: WP Engine has announced that it has made Let’s Encrypt™ SSL/TLS certificates freely avai... Courts crack down on unsafe doors and gates » The company responsible for a metal door that badly injured actor Harrison Ford on a Pinewood Studio... Neustar expands its footprint outside the USA... » LONDON and STERLING, Va.: Neustar, Inc. has expanded its EMEA headquarters to a new office location ... Solgari launches enhanced user application suite » London:  Solgari has launched a number of key additional user application features to its cloud tele... In London cost conscious construction companies ar... » A dramatic switch from human guards to cost-effective smart technologies has been the trend in site ... THE QUEEN AND DUKE OF EDINBURGH RECEIVE LONG SER... » Her Majesty The Queen and His Royal Highness The Duke of Edinburgh both received their Long Service ...


Advertise with Vigilance

Got News?

Got news for Vigilance?

Have you got news/articles for us? We welcome news stories and articles from security experts, intelligence analysts, industry players, security correspondents in the main stream media and our numerous readers across the globe.


Subscribe to Vigilance Weekly

Information Security Header

Prague to host first edition designed to test digital forensics and response skills

UK: SANS Forensics Prague 2013, Europe’s largest dedicated Digital Forensics, Incident Response and Training event will host a new version of the popular NetWars tournament designed to test digital forensics skills.


As part of the week-long event which begins on the 6th of October with the 4th annual European Digital Forensics and Incident Response Summit (DFIR), competitors will run challenges across five levels of increasing difficulty. “You can think of it as a cross between CSI and Survivor,” says Rob Lee, SANS Fellow and the author of this modified NetWars session which is expected to attract around 70 competitors.

Lee conducted a test run of the format at last year’s events with a much smaller group and the feedback has been instrumental in creating the new session. “We are allowing competitors to bring and use any tools they want,” says Lee, “Having a great golf club won’t make you Tiger Woods but we recognise that having tools that you are familiar with that match your thought process will make the challenge closer to real world engagement.”

The updated course has focus on questioning the participants to solve challenges in different ways. “For example, at the harder difficulty levels there may be no tool that can even decode an artefact and requires participants to go into HEX editors.” says Lee.

The competition uses time and accuracy criteria to award points with the top 6 places recognised for “Gold Coin” awards and the overall winner receiving an iPad mini. “If you speak to most of the competitors, it is not all about the winning,” explains Lee, “NetWars allow participants to learn more about their own strengths and weakness and discover where they may progress as InfoSec professionals and practitioners.” Participation is open to any student taking a course during the SANS Prague event.

SANS Forensics Prague welcomed a capacity audience last year and adds a brand new course to the 2013 roster with FOR526: Windows Memory Forensics In-Depth taught by Jess Garcia and Jesse Kornblum. This In-Depth course is critical for any serious investigator who wishes to tackle advanced forensic and incident response cases.

Lee will also be teaching the FOR508: Advanced Computer Forensic Analysis and Incident Response course which has been updated to reflect a dramatic increase in sophisticated attacks against nearly every type of organization. Economic espionage in the form of cyber-attacks, also known as the Advanced Persistent Threat (APT), has proven difficult to suppress and the course is aimed at meeting these issues.

FORENSICS 610: Reverse-Engineering Malware will be taught by Lenny Zeltser, a GIAC Security Expert (GSE), Senior Faculty Member at the SANS Institute and Incident handler at the Internet Storm Center. This is only the second time that US-based Zeltser, the primary author of this popular course, has taught it in Europe.

The event will also host the FOR408: Computer Forensic Investigations - Windows In-Depth course taught by Chad Tilbury and Christian Prickaerts. The 6 day course focuses on the critical knowledge of the Windows Operating System that every digital forensic analyst needs to investigate computer incidents successfully.