9:30 - 9:45

Welcome

Dr Harjinder Singh Lallie

9:45 - 10:25

Network Forensics

Dr. Paul Stephens

Canterbury Christ Church University

Network forensics is often thought of as the poor relation of host-based forensics. This session will explore what network forensics is, what data we can collect to carry it out, and some of the potential problems. The presentation will draw on examples using Wireshark to emphasise the data that can be collected.

10:25 - 11:05

Ethical conduct in digital forensics

Prof. Alastair Irons

University of Sunderland

This talk highlights professional and ethical issues associated with digital forensic investigation. In the talk we will consider standards and competence in digital investigations and what impact this has on potential outcomes to the investigation. We will consider accreditation and issues such as licence to practice. Finally we will explore some of the ethical dilemmas that can come into play during digital investigations.

11:05 - 11:45

Dashcam Forensics

Dr. Harjinder Lallie

University of Warwick

Dashcam evidence is essential in road-traffic related incidents as well as to provide evidence of in-vehicle activity. Dashcams create numerous artefacts of evidential value such as GPS data, temporal data, vehicular speed data, audio, video and photographic images. This talk highlights how this evidence is stored, how it can be extracted and the challenges faced when attempting to extract the evidence.

11:45 - 12:25

Innovative techniques for detecting botnet and other attacks

Dr. Adrian Winckles

Anglia Ruskin University

This talk highlights novel techniques for botnet and other attack detection without the need for the capturing and storing the whole packet. Many organisations collect “data mountains” of PCAP data and never actually do any analysis with it or even know what data they might need. Imagine how this situation might be improved if the data the organisation needed could be indexed?

12:25 - 13:25

Lunch

13:25 - 14:25

Unmanned Aerial Vehicle Forensics

Alan Roder

West Midlands Police

The prevalence of UAVs (Unmanned Aerial Vehicles, AKA Drones) has increased in recent years, along with their use in criminal, nefarious and reckless activities.

This talk provides a brief introduction to UAVs and their use in criminal enterprises and gangs. It continues with a review of an investigation involving two UAVs found crashed within the grounds of Birmingham HMP in November 2016. It will explore the forensic analysis of those UAVs, and how it resulted in the conviction of its operator.

14:25 - 15:05

Finding Cold-Case Missing Persons

John Dempsey

University of Central Lancashire

In April 2020, 6 students at the University of Central Lancashire started working on a Locate International project using open-source intelligence investigation skills to help research case facts around cold-case missing people. This talk will consider our methods, successes, and failures giving an insight into how this programme has operated.

15:05 - 15:45

Developing a new digital forensic technique: Some thoughts on the fundamentals of digital forensics

Dr. Ian Ferguson

Abertay University

Based on actual case work, this talk will reflect upon how the use of deep systems knowledge and concentrating on the basic techniques for searching enabled the development of a new technique and source of digital forensic information for cases involving mobile phones.

15:45-16:25

Computer Forensics in Department of Homeland Security

Frank Brennan

US Department of Homeland Security

This talk focuses outlines the role of the Computer Forensic Analyst in the US Department for Homeland Security. The talk focuses on how forensic analysis fits in with investigations with HIS and the importance of wellness and habits to preserve your mindset while working on very difficult investigations.