DFIR Summit 2019 Call for Presentations (CFP) Now Open

 

 

350x200_No-Date_DFIR-2018 (1)The 2019 DFIR Summit CFP is now open through 5 pm CST on Monday, March 4th.

The 12th annual SANS Digital Forensics & Incident Response (DFIR) Summit is the most comprehensive DFIR event of the year, bringing together an influential group of experts, immersion-style training, and industry networking opportunities in one place.

Summit talks will explore real-world applications of technologies and solutions from all aspects of the fields of digital forensics and incident response. All talks should be technical and specific and provide actionable takeaways.

The DFIR Summit offers speakers the opportunity to present their latest tools, findings, and methodologies to their DFIR industry peers. If you have something substantive, challenging, and original to offer, you are encouraged to submit a proposal.

We are looking for proposed presentations on topics including, but not limited to:

  • Case studies in Digital Forensics, Incident Response, or Media Exploitation that solve a unique problem or case study
  • New forensic or analysis tools and techniques
  • Discussions of new artifacts related to Cloud, Smartphones, Windows, and Mac platforms, malware reverse engineering, or network communications
  • Improving the status quo of the DFIR industry by sharing novel approaches
  • Challenges to existing assumptions and methodologies that might change the industry
  • New analytic techniques that can extract and analyze data more rapidly and/or at a larger scale

Benefits of Speaking

  • Promotion of your speaking session and company recognition via the DFIR Summit website and all printed material
  • Visibility via the DFIR post-Summit on the SANS DFIR Website
  • Full conference badge to attend all Summit sessions
  • Speakers can bring 1 additional attendee for free to attend the summit
  • Private speakers-only networking lunches
  • Speakers-only networking reception on the evening before Summit
  • Continued presence and thought leadership in the community via the SANS DFIR YouTube channel

Who Should Submit

Diversity of thought is critical to any organization’s success, and SANS Summits encourage participation by everyone regardless of age, culture, ethnicity, sexual orientation, or gender identification. Whatever your background, whoever you are, we encourage you to respond to a CFP. We welcome people who are newer to the field or who have not yet done any public speaking, and we can provide mentoring and guidance to help you develop an impactful presentation.

Most talks will be 35 minutes of content + 5 minutes of Q&A. However, we are always interested in exploring new formats, especially for interactive learning.

Deadline:
Monday, March 4, 2019 | 5 pm CST

CFP Submissions must be made via our online form.

Top 11 Reasons Why You Should NOT Miss the SANS DFIR Summit and Training this Year

The SANS DFIR Summit and Training 2018 is turning 11! The 2018 event marks 11 years since SANS started what is today the digital forensics and incident response event of the year, attended by forensicators time after time. Join us and enjoy the latest in-depth presentations from influential DFIR experts and the opportunity to take an array of hands-on SANS DFIR courses. You can also earn CPE credits and get the opportunity to win coveted DFIR course coins!

summit video pic

To commemorate the 11th annual DFIR Summit and Training 2018, here are 11 reasons why you should NOT miss the Summit this year:

1.     Save money! There are two ways to save on your DFIR Summit & Training registration (offers cannot be combined):

·       Register for a DFIR course by May 7 and get 50% off a Summit seat (discount automatically applied at registration), or

·       Pay by April 19 and save $400 on any 4-day or 6-day course, or up to $200 off of the Summit. Enter code “EarlyBird18” when registering.

2.     Check out our jam-packed DFIR Summit agenda!

·       The two-day Summit will kick off with a keynote presentation by Kim Zetter, an award-winning journalist who has provided the industry with the most in-depth and important investigative reporting on information security topics. Her research on such topical issues as Stuxnet and election security has brought critical technical issues to the public in a way that clearly shows why we must continue to push the security industry forward.

·       The Summit agenda will also include a presentation about the Shadow Brokers, the group that allegedly leaked National Security Agency cyber tools, leading to some of the most significant cybersecurity incidents of 2017. Jake Williams and Matt Suiche, who were among those targeted by the Shadow Brokers, will cover the history of the group and the implications of its actions.

·       All DFIR Summit speakers are industry experts who practice digital forensics, incident response, and threat hunting in their daily jobs. The Summit Advisory Board handpicked these professionals to provide you with highly technical presentations that will give you a brand-new perspective of how the industry is evolving to fight against even the toughest of adversaries. But don’t take our word for it, have a sneak peek, check out some of the past DFIR Summit talks.

kaplan

Immerse yourself in six days of the best in SANS DFIR training. Here are the courses you can choose from:

·       FOR500 – Advanced Windows Forensics

·       FOR585 – Advanced Smartphone Forensics

·       FOR610 – Reverse-Engineering Malware

·       FOR508 – Digital Forensics, Incident Response & Threat Hunting

·       FOR572 – Advanced Network Forensics: Threat Hunting, Analysis, and Incident Response

·       FOR578 – Cyber Threat Intelligence

·       FOR526 – Memory Forensics In-Depth

·       FOR518 – Mac and iOS Forensic Analysis and Incident Response

·       MGT517 – Managing Security Operations: Detection, Response, and Intelligence

3.    All courses will be taught by SANS’s best DFIR instructors. Stay tuned for more information on the courses we’re offering at the conference in a future article post.

4.     Rub elbows and network with DFIR pros at evening events, including networking gatherings and receptions. On the first night of the Summit, we’re going to gather at one of Austin’s newest entertainment venues, SPiN, a ping pong restaurant and bar featuring 14 ping pong tables, lounges, great food, and drinks. Give your overloaded brain a break after class and join us at our SANS Community Night, Monday, June 9 at Speakeasy. We will have plenty of snacks and drinks to give you the opportunity to network with fellow students.

5.     Staying to take a DFIR course after the two-day Summit? Attend SANS@Night talks guaranteed to enrich your DFIR training experience with us. Want to know about threat detection on the cheap and other topics? As for cheap (and in this case, that doesn’t mean weak), there are actions you can take now to make threat detection more effective without breaking the bank. Attend this SANS@Night talk on Sunday evening to learn some baselines you should be measuring against and how to gain visibility into high-value actionable events that occur on your systems and networks.

6.     Celebrate this year’s Ken Johnson Scholarship Recipient, who will be announced at the Summit. This scholarship was created by the SANS Institute and KPMG LLP in honor of Ken Johnson, who passed away in 2016. Early in Ken’s digital forensics career, he submitted to a Call for Presentations and was accepted to present his findings at the 2012 SANS DFIR Summit. His networking at the Summit led to his job with KPMG.

7.     Prove you’ve mastered the DFIR arts by playing in the DFIR NetWars – Coin Slayer Tournament. Created by popular demand, this tournament will give you the chance to leave Austin with a motherlode of DFIR coinage! To win the new course coins, you must answer all questions correctly from all four levels of one or more of the six DFIR Domains: Windows Forensics & Incident Response, Smartphone Analysis, Mac Forensics, Memory Forensics, Advanced Network Forensics, and Malware Analysis. Take your pick or win them all!

 

8.     Enjoy updated DFIR NetWars levels with new challenges. See them first at the Summit! But not to worry, you will have the opportunity to train before the tournament. You’ll have access to a lot of updated posters that can serve as cheat sheets to help you conquer the new challenges, as well as the famous SIFT WorkStation that will arm you with the most powerful DFIR open-source tools available. You could also choose to do an hour of crash training on how to use some of our Summit sponsors’ tools prior to the tournament. That should help give you an edge, right? That new DFIR NetWars coin is as good as won!

9. The Forensic 4:cast Awards winners will be announced at the Summit. Help us text2985celebrate the achievements of digital forensic investigators around the world deemed worthy of the award by their peers. There is still time to cast your vote. (You may only submit one set of votes; any additional voting will be discounted). Voting will close at the end of the day on May 25, 2018.

10.  Come see the latest in tools offered by DFIR solution providers. Summit sponsors and exhibitors will showcase everything from managed services covering advanced threat detection, proactive threat hunting, and accredited incident response to tools that deliver rapid threat detection at scale, and reports that provide insights for identifying potential threats before they cause damage.

11.  Last but not least, who doesn’t want to go to Austin?!? When you think Austin, you think BBQ, right? This city isn’t just BBQ, Austin has amazing food everywhere and there’s no place like it when it comes to having a great time. The nightlife and music include the famous 6th Street – which, by the way, is just walking distance from the Summit venue. There are many other landmarks such as Red River, the Warehouse District, Downtown, and the Market District. You will find entertainment of all kinds no matter what you’re up for. Nothing wrong with some well-deserved play after days full of DFIR training, lectures, and networking!

As you can see, this is an event you do not want to miss! The SANS DFIR Summit and Training 2018 will be held at the Hilton Austin. The event features two days of in-depth digital forensics and incident response talks, nine SANS DFIR courses, two nights of DFIR NetWars, evening events, and SANS@Night talks.

The Summit will be held on June 7-8, and the training courses run from June 9-14.

We hope to see you there!

Coin Check: Win the challenge, join the elite list of lethal forensicators & take home a brand new DFIR challenge coin!

forensics_coin (1)Hundreds of SANS Institute digital forensics students have stepped up to the challenge and conquered. They’ve mastered the concepts and skills, beat out their classmates, and proven their prowess. These are the elite, the recipients of the SANS Lethal Forensicator Coin, an award given to a select portion of the thousands of students that have taken any of the SANS Institute Digital Forensics or Incident Response (DFIR) courses. Now, the institute is expanding the opportunity for students to earn these highly coveted tokens in each of the SANS DFIR courses.

Thanks to an effort led by curriculum lead Rob Lee & the SANS DFIR faculty, students can now win specific SANS Lethal Forensicator Coins designed to go with each of the DFIR course themes. These coins are tailored to be icons and the precious prizes to be won by students as a proof and symbol of their mastery in a specific digital forensics specialty.

New DFIR course challenge coins available now:

500FOR500: Windows Forensic Analysis

“Ex Umbra in Solem”: From the Shadows into the Light
In today’s digital world, forensics plays a critical role in uncovering the truth. Forensic examiners shine light on the facts of the case, making good decisions possible. And the forces of evil unceasingly develop new ways to hide their activities, forcing us to continually improve our skills to counter them.

508FOR508: Advanced Digital Forensics, Incident Response & Threat Hunting

“Non Potestis Celare”: You  cannot hide
The most successful incident response teams are evolving rapidly due to near-daily interaction with adversaries. New tools and techniques are being developed, providing better visibility and making the network more defensible. Adversaries can no longer hide.

610FOR610: Reverse-Engineering Malware

“R.E.M”: Reverse-Engineering Master

Today,  attackers are modifying their malware with increasing frequency to bypass antivirus and other endpoint controls. Through reverse-engineering Malware (R.E.M) Analysis Masters can isolate the most appropriate Indicators of Compromise (IOCs) to stop & identify malware.

585FOR585: Advanced Smartphone Forensics

“Omnis Tactus Vestigium Relinquit”:  Every contact leaves a trace
Knowing how to recover all of the data residing on the smartphone is now an expectation in the digital forensics field, and examiners must understand the fundamentals of smartphone handling, data recovery, accessing locked devices, and manually recovering data hiding in the background on the device. There are traces of evidence hiding on the device, and you know how to uncover them.

572FOR572: Advanced Network Forensics Analysis

“Malum Loquitur, Bonum Auscultat”: Evil must talk, so good must listen

Network Forensic professionals are hunters with great visibility, who can find a target among a mass of camouflaging data. Wisdom, experience, and stealth are all embodied by the owl’s watchful, unwavering eye, seeking its prey under the cover of darkness. No matter how crafty an adversary may be, their communications will allow the hunter to find, identify, and ultimately eliminate their presence.

518FOR518: Mac Forensics

“Impera magis. Aliter cogita”: Command more and think differently.

Apple users have always thought differently and that goes for Apple forensicators too. The analysts who hold this coin take command of their forensic analysis and appreciate looking at the raw data and interpreting it correctly without the necessity of superfluous tools. Knowing where you came from can help you move forward, this is where the hat tip to the original colored Apple logo comes in. New artifacts are presented to analysts in every OS update, the knowledge of historic elements may provide insight.

FOR578_coinFOR578: Cyber Threat Intelligence

“Hominem unius libri timeo”: I fear the man of one book.

FOR578 is all about developing analytical skills. To think critically and expand our views which is a skill that applies to any security profession. The quote is attributed to Thomas Aquinas and despite the common use of the phrase (which is meant to deride the person who is not well studied across multiple subjects) the original meaning was to state that a person who understood one good book well could defeat their opponent. Thus, this phrase can be interpreted two entirely different ways. Both are about self-education and broadening our views on the world.

FOR526_coinFOR526: Memory Forensics In-Depth

“Cur mihi oculi dolent?” Why do my eyes hurt?

Memory forensics reveals deeper insights into the state of a compromised system and stands as the best source for detection of malware and OS/process manipulation/subversion. These analysis methods reveal key evidence which may not be uncovered through querying the operating system or digging through network packets. This quote comes from the original Matrix movie, a question Neo asks of Morpheus when he first wakes from his life in the artificial reality created by sentient machines. It is this awakening and raw view of reality that we as forensic examiners/incident responders strive to achieve through deeper analysis of system memory.

 

Netwars DFIR Netwars

Staying up-to-date with the latest challenges in the digital forensics field demand analytical skills that cannot be gained by just reading a textbook. Just like firemen could never learn the skills of how to fight a fire by just studying theory, incident responders, threat hunters, and digital forensic investigators can test their skills with DFIR Netwars.

New DFIR Challenge coin back design:

BackThe challenges for each course are held on the last day. Students must successfully overcome a number of obstacles, directly compete against fellow students, and prove their proficiency during timed, hands-on incidents. The obstacles, competitions and hands-on scenarios have been created by SANS’ top instructors – digital forensics practitioners, subject matter experts, experienced teachers and professional leaders in their own right. At the end of the challenge, the instructor announces the winner(s) who are awarded the coins at the end of the 6th day of class and winners are later on listed on the SANS Institute’s virtual wall of Lethal Forensicator Coin Holders.

 

History of the SANS Challenge coins:

The coin – more precisely, Round Metal Object (RMO) – was initially created to recognize students who demonstrate exceptional talent, contributions, or who serve as leaders in the digital forensics profession and community. The coin is meant to be an honor; it is also intended to be rare. SANS Institute uses the coins to identify and honor those who excel at detecting and eradicating threats, understand the critical importance of cybersecurity and continually strive to further not only their knowledge but also the knowledge of the entire digital forensics field. They actively share their experience and encourage learning through participation in the community and are typically leaders in the digital forensics and incident response community.

Those who are awarded the Lethal Forensicator are also bestowed special privileges and recognition, including participation in the so-called and well-regarded “coin check” challenge and response.

“Coin check” Challenge:

Initiated by one coin holder to another, a coin check typically begins by a challenger holding his or her coin in the air or slamming it on a table and yelling “coin check!” All who are challenged must respond by showing their coins to the challenger within 10 seconds, and whoever fails to do so must buy everyone a round of drinks. If all the challenged coin holders do produce their coin, the challenger must by the round of drinks. (By the way, if you accidentally drop your coin and it makes an audible sound on impact, then you’ve “accidentally” initiated a coin check. And, there are no exceptions to the rules!)

Coin checks aside, there are other ways to win the DFIR Challenge coins besides being an exceptional DFIR student and winning the classroom challenges. Each GOLD GCFA, GREM, GCFE member that has written a published white paper that has furthered the field of research in the Digital Forensics field receives a coin, as do SANS Digital Forensics Blog authors who have written six published entries over a one-year span. In addition, speakers and panelists who participate at a SANS Digital Forensic Summit are awarded coins (vendors and vendor-related speakers are not eligible). Finally, any coin holder can nominate an individual in the digital forensics field who has contributed knowledge, tools or service.

For more information on our SANS DFIR courses, please visit our Forensics Courses list. And to read more about the coin and the history of the term “Forensicator,” check out our Community – Lethal Forensicator Coin page.

SANS Cyber Threat Intelligence Summit 2018 – CALL FOR SPEAKERS NOW OPEN

Slider_CTI (1)

Cyber Threat Intelligence Summit & Training 2018

Call for Speakers- Now Open

Summit Dates: January 29 & 30, 2018
Training Course Dates: January 31-February 5, 2018
Call for Presentations Closes on Monday, 7 August at 5 pm EDT.
Submit your presentation here

Our 6th annual Cyber Threat Intelligence (CTI) Summit will be held in Bethesda, MD. The 2018 Summit will focus on how to make cyber threat intelligence programs more effective, and how to deliver value for intelligence consumers.

If you are interested in presenting or participating on a panel, we’d be delighted to consider your CTI-focused proposal with use cases and communicable lessons. We are looking for presentations from both the intelligence producer and the intelligence consumer fields with a focus on topics that will be directly relatable and applicable to the summit audience. This conference is practitioner focused, and vendor marketing submissions will not be considered.

The CTI Summit offers speakers opportunities for exposure and recognition as an industry leader. If you have something substantive, challenging, and original to offer, you are encouraged to submit a proposal.

Submission Guidelines

  • CFP submissions should detail how the proposed CTI case study, tool, or technique can be utilized by attendees to increase their security posture.
  • All CTI Summit presentations will be 30 minutes with 5 minutes for questions.
  • We are looking for CTI Presentations that focus on:
  1. Practical talks that attendees can take back to their organizations and operationalize.
  2. Vendor agnostic case studies that highlight CTI successes as well as failures.
  3. Vertical/industry specific approaches to CTI programs.
  4. Toolkits that support or enable CTI.
  5. Strategies to develop CTI analysts.
  6. Strengthening analytical techniques.
  7. Lessons learned when establishing or reestablishing a CTI framework within a security program.

The CTI Summit Advisory Board would like to encourage first-time presenters to respond to the call for presentations. A diverse mix of both new and experienced speakers will raise the bar for the summit. Advisory Board members are willing to provide submission feedback prior to the CFP deadline as well as mentoring and guidance throughout the process.

Benefits of Speaking:

  • Promotion of your speaking session and company recognition via the CTI conference website and all printed materials
  • Visibility via the CTI post-Summit on the SANS DFIR Website
  • Top 3 presentations invited to do a full SANS Webcast
  • Full conference badge to attend all Summit sessions
  • Speakers can bring 1 additional attendee at no registration cost
  • Private speakers-only networking lunches
  • Speaker networking reception on evening before Summit

NOTE: All presentations will be video-recorded.

 

Forensic 4:cast Awards Nomination Closing Date and News

 

Blog originally posted by Lee Whitfield, March 12th, 2017: http://dfir.to/2nFvLP5
Award Nomination submission page: http://dfir.to/4CAST2017
Deadline for submissions: March 31, 2017

 

 

698x300_DFIR-Summit-2017_Awards

A number of people have asked me about the closing date for the nominations
for the Forensic 4:cast Awards. Well here it is: March 31, 2017.

I will be accepting nominations as long as it is still March 31 somewhere in the world. I will then spend a couple of days tallying the nominations before revealing the final 3 for each category in the voting stage.

Don’t forget that the awards will take place at the SANS DFIR Summit 2017 in Austin, Texas. The summit runs June 22-23 but SANS also runs classes through June 29. This is a great opportunity to take that SANS class you’ve been eyeing for a few months. Most of the classes have had significant updates in the last few months..

Details can be found here: https://www.sans.org/event/digital-forensics-summit-2017/

Also, I’m going to be speaking at EnFuse in Las Vegas this year. The dates are May 22-25, 2017 and the conference is held at Caesar’s Palace.

I’ll also be giving the same presentation at the SANS DFIR Summit in June. Check out the impressive DFIR Summit Agenda: https://www.sans.org/event/digital-forensics-summit-2017/summit-overview/

Speaking of SANS, I’ve recently left Digital Discovery to take a position with the SANS Online Training team as a Subject Matter Expert. That means that if you have a question about one of the DFIR classes, I’ll probably be answering it. I also get to test the labs for the classes and do a bunch of other fun stuff. I’m really looking forward to it.

Here are some pictures of last years’ Forensic 4:cast Awards at the DFIR Summit 2016!

4 2 3 5 6 1

 

Hope to see you all at this year’s DFIR Summit in June!

Ken Johnson DFIR Scholarship

 

KJKen Johnson, husband of Jessica Towle Johnson, and father of two beautiful young children, Savannah and Brady, was tragically taken from this life on April 4, 2016 at the age of 38.

Ken was an amazing husband and father. He was married to his best friend on February 19, 2000. His love for his family was his driving force behind all of his accomplishments and successes. One of his and his family’s proudest moments was when he received his master’s degree from Iowa State University in 2013.

Ken’s passion for digital forensics led him to self-study Windows 8 internals and publish leading research on the topic. Even though Ken was relatively unknown in the Digital Forensics and Incident Response (DFIR) community at the time, he submitted to a Call For Presentations (CFP) and was accepted to present his findings at the 2012 SANS DFIR Summit.

Ken’s networking at the DFIR Summit led to a career at KPMG LLP, where he was a vital part of the response team for many high-profile computer forensic and incident response engagements. Ken enjoyed working with his team, and in the process became friends with many of his colleagues.

Over time, Ken’s network expanded to the greater DFIR community, where he enjoyed sharing and receiving knowledge amongst the industry. He attended and spoke at many conferences across the country and helped organize BSides Iowa at Iowa State. Ken also blogged about his journey through his profession; one of Ken’s most personal blog posts discusses decisions he made in his life to step out of his comfort zone and follow his dream in DFIR, all while thanking those closest to him for their support.

In memory of Ken Johnson, the SANS Institute and KPMG LLP created a scholarship that was introduced at the SANS DFIR Summit in June 2016 and will be awarded annually in early June.

 

IMG_0029IMG_0032

 

 

 

 

 

 

 

 

 

About the Scholarship

The objective of the Ken Johnson Scholarship is to foster the value of DFIR professional development and to encourage and mentor a dedicated student showing genuine promise in the DFIR field. This scholarship will provide:

  • Two SANS DFIR classes in any format (contributed by SANS and KPMG LLP)
  • One complimentary entry to the SANS DFIR Summit in the year the scholarship is awarded
  • Mentoring from two DFIR coaches (Matt Bromiley and David Nides)
  • Consideration for an internship

Scholarship Submission Guidelines

Eligibility Requirements:

  • Undergraduate (junior or senior year) or graduate students enrolled full-time in a degree program at an accredited college or university in the U.S. (Full-time is defined as twelve credit hours per semester for undergraduate students and nine credit hours for graduate students.)
  • Preference will be given to students enrolled in computer science, engineering, or other technology-related degree programs, but students earning degrees in other fields of study are encouraged to apply.
  • You may be a citizen of any country (U.S. citizenship is not required).

Application Submission:

  • Submissions are accepted on a rolling basis; one scholarship will be awarded annually at the DFIR Summit in June.
  • Resumes are required with applications.
  • Students are required to write a paper (not to exceed five pages, not including resumes) responding to the following questions:
  1. Why are you passionate about DFIR?
  2. What is a DFIR-related project you’re particularly proud of and relates to your future goals?

Complete scholarship submissions should be emailed to KenJohnsonScholarship@sans.org by May 18, 2018.

 

DFIR Summit 2017 – CALL FOR PRESENTATIONS

 

Call for Presentations Now Open!

 

dfirsummit 2017Submit your proposal here: http://dfir.to/DFIR-CFP-2017
Deadline: January 16th at 5pm CT

 

The 10th Annual Digital Forensics and Incident Response Summit Call for Presentations is open through 5 pm EST on Monday, January 16, 2017. If you are interested in presenting or participating on a panel, we’d be delighted to consider your practitioner-based case studies with communicable lessons.

The DFIR Summit offers speakers the opportunity for exposure and recognition as industry leaders. If you have something substantive, challenging, and original to offer, you are encouraged to submit a proposal.

Check out some of the DFIR Summit 2016 talks:

Capture

We are looking for Digital Forensics and Incident Response Presentations that focus on:

  • DFIR and Media Exploitation case studies hat solve a unique problem
  • New Forensic or analysis tools and techniques
  • Discussions of new artifacts related to smartphones, Windows, and Mac platforms
  • Focusing on improving the status quo of the DFIR industry by sharing novel approaches
  • Challenges to existing assumptions and methodologies that might change the industry
  • New, fast forensic techniques that can extract and analyze data rapidly
  • Focus on Enterprise or scalable forensics that can analyze hundreds of systems instead of one at a time

 

CALL FOR PAPERS – SANS Cyber Threat Intelligence Summit 2017

Capture5

 

Summit Dates: January 31, 2017 and February 1, 2017

Training Course Dates: January 25-30, 2017 Summit Venue: Renaissance Arlington Capital View Hotel — Arlington, VA

Deadline to Submit is July 29, 2016.  To submit click here

 

 

 

This year the CTI Summit is going old school. CTI is a relatively new field, however the intelligence field itself has been around for centuries. Throughout the summit we will focus on understanding how classic intelligence approaches and techniques apply to cyber threat intelligence – where they align and where they don’t – and will provide use cases of not only classic methods of producing Cyber Threat Intelligence, but of implementing and making decisions based off of intelligence as well.

If you are interested in presenting or participating on a panel, we’d be delighted to consider your CTI-focused proposal with use cases and communicable lessons. We are looking for presentations from both the intelligence producer and the intelligence consumer fields with a focus on topics that will be directly relatable and applicable to the summit audience.

The CTI Summit offers speakers opportunities for exposure and recognition as an industry leader. If you have something substantive, challenging, and original to offer, you are encouraged to submit a proposal.

CFP submissions should detail how the proposed CTI case study, tool, or technique can be utilized by attendees to increase their security posture. All CTI Summit presentations will be 30 minutes with 5 minutes for questions.

The CTI Summit Advisory Board would like to encourage first time presenters to respond to the call for presentations. A diverse mix of both new and experienced speakers will raise the bar for the summit. Advisory Board members are willing to provide submission feedback prior to the CFP deadline as well as mentoring and guidance throughout the process.


We are looking for CTI Presentations that focus on:

  • Classic intelligence approaches applied to CTI analysis and production
  • Interesting perspectives or case studies that challenges CTI assumptions and results in a shift in understanding
  • Case studies on the application of cyber threat intelligence to a security or business problem
  • Innovative ways to utilize or analyze CTI with classic techniques
  • New tools developed to support or enable CTI

Benefits of Speaking

  • Promotion of your speaking session and company recognition via the CTI conference website and all printed materials
  • Visibility via the CTI post-Summit on the SANS DFIR Website
  • Top 3 presentations invited to do a full SANS Webcast
  • Full conference badge to attend all Summit sessions
  • Speakers can bring 1 additional attendee at no registration cost
  • Private speakers-only networking lunches
  • Speaker networking reception on evening before Summit
  • Presentations will be recorded and may be made available via the Internet to a wider audience

Digital Forensics & Incident Response (DFIR) Summit Social Media Ambassadors

 

CiBHBd2WEAErK30The SANS DFIR Summit team is looking for Social Media Ambassadors

Are you a social media influencer in the DFIR space?
We are looking for you!

The SANS DFIR  Summit Team is looking for two social media rock stars that can share their DFIR Summit experiences onsite and provide a post-summit event analysis.  The ideal individuals will show the world why this event is very unique, fun, and downright awesome for others to attend.  If this sounds like something you would like to do, then submit your entry and help us spread the word!

If you are selected you will have the opportunity to attend the Summit, June 23-24, 2016, with social media credentials at NO COST*

Apply today by sending an email to summitsocial@sans.org by June 1st, 2016 with the following information:

  • Your name, Company, and job title.
  • Your twitter, Facebook, LinkedIn, and any other relevant social media profiles.
  • Why you qualify to be our #DFIRSummit Social Media Ambassador.

Those selected will have the opportunity to:

  • Participate in the two day DFIR Summit sessions, interact with exhibitors and network with attendees and industry experts
  • Serve a critical role in sharing discussions and lessons learned from DFIR Summit speakers.
  • Meet and interact with representatives from SANS and the DFIR community.
  •  Receive a DFIR Lethal Forensicator coin

Please note: This program is designed for individuals, not PR/communications representatives, to join and add value to the social conversation around Digital Forensics & Incident Response issues.

*Social Media Ambassadors are responsible for their own expenses for travel, accommodations, and other amenities.

SANS third annual incident response survey is now online

Capture26The third annual SANS survey on incident response is now online.  This survey will help us look at the continuing evolution of incident response, how tactics and tools have changed in the last three years and how security professionals are dealing with increasing numbers and kinds of attacks.

If  you are a professional working with or in an IT organization and are engaged in the practice of cybersecurity & incident response, we want to hear from you. Please take a few minutes to help   provide insight into the maturity of incident response processes and functions spanning a broad variety of environments.

Your participation automatically makes you eligible to enter a drawing for a $400 Amazon gift card.

The survey report as well as key takeaways and recommendations for practitioners and management will be discussed during a two-part results webcast on June 8 and 9 at 1:00 PM Eastern.

—————————————————————————————————————————–
Join us at the Digital Forensics & Incident Response Summit in June!

The 9th annual Digital Forensics and Incident Response Summit will once again be held in the live musical capital of the world, Austin, Texas. The Summit brings together DFIR practitioners who share their experiences, case studies and stories from the field. Summit attendees will explore real-world applications of technologies and solutions from all aspects of the fields of digital forensics and incident response, all in one single place.

Summit Dates: June 23-24 | Training Course Dates: June 25-30 | Register at sans.org/dfirsummit