Identification and Preservation of Electronic Evidence
Presenter:  Mark Spencer, President, Arsenal Consulting Of Boston (View Bio)
Originally Aired:  Wednesday, June 2, 2010, 1:00pm ET - 4:00pm ET
Price: $200
Register Now

ALREADY AN ELITE MEMBER or REGISTERED? - Click here to launch the video.

Computer forensics involves the identification, preservation, acquisition, and analysis of electronic evidence. All too often the importance of proper identification and preservation is overlooked.

Instructor Mark Spencer has spent over a decade in law enforcement and the private sector performing computer forensics and understands the peril that computer forensics practitioners face if they don't build their cases on solid foundations. Learn how to educate your management team, clients, and others regarding the importance of identifying and preserving electronic evidence and determine the most appropriate methods of doing so.

Attendees will:

• Understand the importance of swift and thoughtful identification of electronic evidence
• Learn what kinds of documentation are critical during preservations
• Be prepared to build their own successful computer forensics fly-away kit
• Select appropriate methods of preservation based on circumstances

First Hour - Identification and Preparation

• Where does electronic evidence exist?
• Developing intuitive forms to document preservation
• Building a computer forensics fly-away kit

Second Hour - Traditional Preservation

• AccessData FTK Imager Primer
  • Evidence acquisition using Tableau hardware write-blocks

• Forward Discovery Raptor Primer
  • Safely booting evidence for acquisition to external storage

• Stand-alone evidence acquisition
  • Logicube Talon Primer

Third Hour - Advanced Preservation

• Technology Pathways ProDiscover Incident Response Primer
  • Acquisition of live electronic evidence over networks

• HBGary FDPro Primer
  • Microsoft Windows live memory acquisition

• CelleBrite UFED Primer
  • Evidence acquisition from mobile phones

Mark Spencer is President of Arsenal Consulting where he leads engagements involving computer forensics, information security, and electronic discovery for law firms, corporations, and government agencies. Mr. Spencer has more than a decade of law-enforcement and private-sector computer forensics experience. Before founding Arsenal Consulting in June 2009, Mr. Spencer worked for First Advantage Litigation Consulting, EvidentData (acquired by First Advantage), and the Suffolk County District Attorney's Office. His professional engagements have included cases involving evidence elimination, computer intrusion, intellectual-property theft, online undercover operations, employment disputes, and large-scale electronic discovery projects. Mr. Spencer is also an adjunct professor at Bunker Hill Community College and an instructor with Computer Security Institute. He has taught for clients including NASA, Lockheed Martin, and the Royal Canadian Mounted Police. He earned a Bachelor of Arts in Criminal Justice from the University of Massachusetts, Boston, successfully completed the Massachusetts Criminal Justice Training Council's Basic Course of Training for Reserve Police Officers, and has been awarded numerous industry-leading certifications. Mr. Spencer is a regular presenter on topics relating to computer forensics, serving as a guest speaker at industry events and appearing on television.

Register Now

ALREADY AN ELITE MEMBER or REGISTERED? - Click here to launch the video.

For more information, please email csi@ubm.com.