January TASK - A Night of Forensics (and FTK 4!)
NOTE: The upcoming event is sponsored by AccessData - attendees have a chance of winning the newly released copy of FTK v4!
January TASK Meeting: Forensics and Data Recovery25 January 2012; 6:00 - 9:00 PMLeslie Dan Pharmacy Building, 144 College Street, Room B150
First TASK event of the year is this week! We look forward to seeing you there.Talk 1: Who's watching the gatekeeper?What is the best way to monitor the activities of your privileged users (system administrators!)? This evenings discussion will cover:
- How to address the administrative control audit and investigation challenge
- How to incorporate both host data and network data for complete insight and visibility into the matter
- How to leverage SIEM Technology to supplement the effort
- Practical techniques to secure your network
Speaker: Tom Wong, Engineer at AccessData .Prior to joining Accessdata, Tom was a Senior Security Engineer for Microsoft, where he led the Network Security Monitoring and Response team. Tom has over 15 years of Information Technology Experience in the software industry.
Talk 2: Data RecoveryARE YOU A HERO OR A VILLAN?ARE YOU A PROFESSIONAL OR A RUSSIAN ROULETTE PLAYER?ARE YOU A CAUSE OF DATA LOSS OR A SOLUTION PROVIDER?The number one cause of data loss is hardware failure. The number two reason is human error and much, if not most of it is caused or compounded by technicians.This presentation is meant to inform you of many of the reasons for data loss, how to minimize the risk of loss and how to maximize the chance of a successful, cost-effective recovery when losses do occur.You will be presented with information that every professional computer technician should know; but has never been taught.Speaker: R. Douglas Coughey, President, Recovery Force Inc .Doug is a member of the High Tech Crime Investigation Association, an associate member of the Ontario Council of Private Investigators and was a participant of the 2003 & 2007 Annual Toronto Fraud Forum co-hosted by the Association of Certified Fraud Examiners (Toronto Chapter) and the Canadian Association of Investigation Units (Trillium Chapter).About This Month's TASK Sponsor: AccessDataAccessData ( www.accessdata.com ) is the global leader in forensic and eEvidence software.AccessData has recently released its new CyberSecurity Solution that integrates with SIEM Solutions to empower the organization to gain better visibility and insight into what's actually occurring on the network. For a brief overview of how this solution works, and the benefits it provides in the market place, please watch this short video:http://www.youtube.com/watch?v=NRJk9ZwXY5w , or review the marketing brochure which outlines the solution's incident response capabilities: http://accessdata.com/downloads/media/CIRT_brochure.pdf*** There will be a giveaway at the TASK event of the latest version of FTK, version 4, which includes Volatile Data and Malware Analysis on top of its award-winning imaging and computer forensic analysis capability. Be sure to attend and participate in the raffle for a FREE FTK. ***Source: task