Forensic Investigations – Tools and Hacks Observed - Ondrej Krehel

Forensic Investigations – Tools and Hacks Observed, Ondrej Krehel at NYC Cyber Security meetup at Thoughtworks NYC on Feb 25 2016

ABSTRACT
Investigation of hacking incidents often requires combine effort of different technologies. Network forensics is one of the components in the process of finding compromised hosts, capturing and reconstructing malicious sessions. This lab will cover open source tools used for network forensics. Variety of tools can produce quite significant supplement to electronic evidence, and in many cases also capture the malicious executable transmitted in the traffic, or ex-filtrated data.

Various network protocols and their structure are presented. Open source network forensic tools are used on the traffic captured from a hacked web server. Different tools are introduced for specific tasks in the investigation process. Captured traffic will be analyzed and reconstructed and various artifacts found in the investigation are discussed.

SPEAKER
Ondrej Krehel - http://www.csoonline.com/author/Ondre...

EVENT PAGE
http://www.meetup.com/metrocsc/events...

EVENT ORGANIZER
OWASP NYC Chapter - https://www.owasp.org/index.php/NYC

EVENT SPONSORS
Hewlett Packard - http://www8.hp.com/us/en/software-sol...
ProactiveRISK - http://www.proactiverisk.com/
NetSPIi - http://www.netspi.com/
Talener - http://www.talener.com/
LogRhythm - https://logrhythm.com/index.html

VENUE SPONSOR
Thoughtworks NYC - https://www.thoughtworks.com/

VIDEO SPONSOR:
Internet Society NY Chapter - http://isoc-ny.org

ABOUT OWASP:
The Open Web Application Security Project (OWASP) is a 501(c)(3) worldwide not-for-profit charitable organization focused on improving the security of software. Our mission is to make software security visible, so that individuals and organizations worldwide can make informed decisions about true software security risks.
https://www.owasp.org/

#3134-03