[no subject]

This presentation will look at the fascinating field of data forensics. It will cover such topics as who the clients of forensic examiners are, what can be examined, how an examination is performed, and how you can get started in the forensic field. It will delve into the differences between evidence and hearsay and the differences between examiners and investigators. It will look at the data that can be recovered and the devices that can be searched. Then a brief overview of the steps involved in a forensic examination from collection of the data, recovery of erased, hidden, or encrypted files, to reporting your findings to the client. It will conclude with a look at how to jump start your career in the field of data forensics and some of the business ramifications of starting a forensic practice. Information is the commodity of the future and with its increasing value there is a growing need to protect it. When these measures fail clients want to know what happened and who the
 perpetrators were. This is the field of data forensics. Within the near future all companies with an IT department will have forensic specialist on staff.

About Kirby Laye

Kirby is the founder and one of several Senior Consultants with The Blue Group. He has over 20 years in the IT industry and has seen many changes from his days of performing backups on tape reels to the advent of networking with Novell, OS/2, and Microsoft Windows NT. Kirby has successfully delivered network projects in 48 states and all the provinces of Canada. He provides individuals, companies, and government entities with answers to their technical needs. Kirby holds multiple industry certifications and regularly has articles and columns in newspapers and business journals. Kirby is a member of the NPA and serves on its Board of Directors; he is also a member of the High Tech Crime Investigators Association.

-------------- next part --------------
An HTML attachment was scrubbed...



</pre>
<!--X-Body-of-Message-End-->
<!--X-MsgBody-End-->
<!--X-Follow-Ups-->
<hr>
<ul><li><strong>Follow-Ups</strong>:
<ul>
<li><strong><a name="00183" href="msg00183.html">[ale] OT: &quot;Data forensics - A look at the future&quot;</a></strong>
<ul><li><em>From:</em> transam at verysecurelinux.com (Bob Toxen)</li></ul></li>
</ul></li></ul>
<!--X-Follow-Ups-End-->
<!--X-References-->
<!--X-References-End-->
<!--X-BotPNI-->
<ul>
<li>Prev by Date:
<strong><a href="msg00178.html">[ale] Best FS to use when doing unclean shutdowns?</a></strong>
</li>
<li>Next by Date:
<strong><a href="msg00180.html">[ale] Best FS to use when doing unclean shutdowns?</a></strong>
</li>
<li>Previous by thread:
<strong><a href="msg00173.html">[ale] Best FS to use when doing unclean shutdowns?</a></strong>
</li>
<li>Next by thread:
<strong><a href="msg00183.html">[ale] OT: &quot;Data forensics - A look at the future&quot;</a></strong>
</li>
<li>Index(es):
<ul>
<li><a href="maillist.html#00179"><strong>Date</strong></a></li>
<li><a href="threads.html#00179"><strong>Thread</strong></a></li>
</ul>
</li>
</ul>

<!--X-BotPNI-End-->
<!--X-User-Footer-->
<!--X-User-Footer-End-->
</body>
</html>