Ottawa Chapter – HTCIA

I have been asked to post the following workshop information.

NEW for this Workshop ONLY: Any person in the private sector that is working closely with law enforcement may attend this workshop. Please send your registration form before December 10th, 2011.

Canadian Police College: Live Analysis Workshop

Details

This four-day workshop is designed for technological crime investigators who may be required to seize and / or analyze system information or memory contents from live computers. It looks at memory structures along with the different types of system information available on live computers.

It also addresses the proper methodology and techniques for seizing memory and system information from live computers. Techniques for extracting images, passwords, chat logs, documents, and other artefacts from volatile data will also be covered as will the basic interpretation and analysis of live system information.

The focus of the workshop is to give the investigator confidence in seizing volatile data from live computer systems, and to give the investigator the necessary skills to perform a basic analysis of the seized data.

Theme:

• Windows memory architecture basics
• Methodological concerns
• Tools and techniques for acquiring computer memory
• Tools and techniques for searching and recovering artefacts from memory
• Tools and techniques for acquiring system information
• Interpretation and possible responses to system information

Eligibility:

• To be eligible to register in the Live Analysis workshop at the Canadian Police College (CPC), a potential participant must be either:
• an employee of a Canadian or an international police service
• an employee with Peace Officer status from a Canadian government agency (federal, provincial or municipal)
• an employee who has an investigative mandate within an agency from the public or private sector

Technical knowledge criteria:

Individuals must have successfully completed a course of training in computer forensic analysis (e.g. EnCase, CMPFOR, etc.).

Tuition:

• Canadian Police: $500
• Canadian Agencies / Private Sector: $700
• International: $900

Location:

January 24-27, 2012. 8am to 4pm. (Four days)
Canadian Police College
1 Sandridge Road
Ottawa

Contact Information: CPC Registrar – 613-993-6033 or cpcregistrar@rcmp-grc.gc.ca.

Registration information and forms are available at: http://www.cpc.gc.ca/en/registration

The CPC Live Analysis Workshop – Jan 24 – 27, 2012 by Scott Murphy, unless otherwise expressly stated, is licensed under a Creative Commons Attribution-Share Alike 2.5 Canada License.