09.09.18

September DC206 Meeting, Locksport, and BBQ: Cloud Forensics

Posted in Uncategorized at 12:01 by Lee Fisher

What: September DC206 Meeting, Locksport, and BBQ
When: September 16th (3rd Sundays), 11:00am-~4:00pm
Where: Black Lodge Research
Who: (Hattz, Dune, Spooney, Panic, and the DC206 community)

Locksport begins at 11:00a; DC206 Meeting presentation begins at 1:00pm; BBQ begins when the presentation is done.

** LOCKSPORT EVENT:

Dune will be running a Locksport event, starting at 11:00 until 1:00.

** DC206 MEETING PRESENTATION:

Cloud Forensics
by Hattz

Abstract:

This presentation introduces onsite and cloud based forensic tools, focusing on windows boxes, it includes tips and tricks to make Linux forensics painless as well.

I’ll go over tools and techniques to do an onsite forensic investigation, focusing on free and open source tools. I’ll go through basics of Azure and Amazon cloud forensics, how to get VHDs down, and perform forensics for region locked data. I’ll cover basics of legal concerns as well as evidence preservation.

There will be cursing, Shmoo balls, and drinking for cybers.

Bio:

Hattz does Azure DFIR at Microsoft.

This event will be videotaped by Panic. During event, remote users can interactively ask questions to speaker. You’ll need to sign in to Google Chat on the below Youtube URL. If you cannot attend, here’s the URL for the live streaming (and afterward, a copy of the video):

https://www.youtube.com/watch?v=Aartj02UO6M

** POST-EVENT BBQ:

This month the chef will be Spooney. We’re planning hamburgers and some brats.

Please feel free to bring a side-dish, or some additional meat. The BLR fridge always needs restocking with decent beers and hard ciders. Vegetarians, please bring something you can eat: the salad — and for the most part the fake tofu/etc meats — we’ve brought in recent months has been ignored.

You can donate $12 to help us restock our beverages, using Paypal:
https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=743VSYX72C7G2

You can also buy some supplies, using Amazon Wishlist:
https://www.amazon.com/gp/registry/wishlist/3GIXQQ7XSJ3Q1?ref_=cm_sw_r_cp_ep_ws_VlWKBbCSZKFHA

** MORE INFO:

Black Lodge Research:
17725 NE 65th St, A-155
Evans Business Park, Bldg A
Redmond, WA 98052
Building A, mid-building, between the coffee roaster and the security
company.
Park facing the street, not in front of other businesses, or you may get
towed.

Black Lodge Research

Redmond, WA
154 Members

Anyone interested in Information Security should checkout Black Lodge Research. Members can attend talks each month on a variety of topics and skill levels. Every Thursday BLR…

Next Meetup

Open Hack Night

Thursday, Sep 13, 2018, 7:00 PM
1 Attending

Check out this Meetup Group →

https://www.facebook.com/BlackLodgeResearch/

https://blacklodgeresearch.org/
http://www.openstreetmap.org/node/2184616237#map=19/47.66334/-122.10399
https://map.what3words.com/warm.rapid.epic
https://dc206.org/
http://lists.dc206.org/listinfo.cgi/list-dc206.org

 

Comments are closed.