Difference between pages "SIM Cards" and "Upcoming events"

From Forensics Wiki
(Difference between pages)
Jump to: navigation, search
 
(Conferences)
 
Line 1: Line 1:
[[Image:Simpic.jpg|thumb|A typical SIM card.]]
+
<b>PLEASE READ BEFORE YOU EDIT THE LISTS BELOW</b><br>
 +
Events should be posted in the correct section, and in date order. An event should NEVER be listed in more than one section (i.e. Ongoing/Continuous events should not be listed in Scheduled Training).  When events begin the same day, events of a longer length should be listed first.  New postings of events with the same date(s) as other events should be added after events already in the list. If a provider offers the same event at several locations simultaneously, the listing should have a single (ONE) entry in the list with the date(s) and ALL locations for the event. Please use three-letter month abbreviations (i.e. Sep, NOT Sept. or September), use two digit dates (i.e. Jan 01 NOT Jan 1), and use date ranges rather than listing every date during an event(i.e. Jan 02-05, NOT Jan 02, 03, 04, 05).<br>
 +
<i>Some conferences or training opportunities may be <u>limited</u> to <b>Law Enforcement Only</b> or to a specific audience.  Such restrictions should be noted when known.</i>
  
== SIM-Subscriber Identity Module ==
+
This is a BY DATE listing of upcoming conferences and training events relevant to [[digital forensics]].  It is not an all inclusive list, but includes most well-known activities.  Some events may duplicate events on the generic [[conferences]] page, but entries in this list have specific dates and locations for the upcoming event.
  
The UICC (Universal Integrated Circuit Card) is a smart card which contains account information and memory that is used to enable GSM cellular telephonesOne of the applications running on the smart card is the SIM, or Subscriber Identity Module. In common parlance the term "UICC" is not used an the phrase "SIM" is used to describe the smart card itself.
+
This listing is divided into four sections (described as follows):<br>
 +
<ol><li><b><u>Calls For Papers</u></b> - Calls for papers for either Journals or for Conferences, relevant to Digital Forensics (Name, Closing Date, URL)</li><br>
 +
<li><b><u>Conferences</u></b> - Conferences relevant for Digital Forensics (Name, Date, Location, URL)</li><br>
 +
<li><b><u>On-Going / Continuous Training</u></b> - Training opportunities that are either always available online/distance learning format or that are offered the same time every month (Name, date-if applicable, URL)</li><br>
 +
<li><b><u>Scheduled Training Courses</u></b> - Training Classes/Courses that are scheduled for specific dates/locationsThis would include online (or distance learning format) courses which begin on specific dates, instead of the "start anytime" courses listed in the previous section. (Name, Date(s), Location(s), URL)<br></li></ol>
  
Because the SIM is just one of several applications running on the smart card, a given card could, in theory, contain multiple SIMs. This would allow multiple phone numbers or accounts to be accessed by a single UICC. This is seldom seen, though there is at least one "12-in-1" SIM card being advertised at present.
+
The Conference and Training List is provided by the American Academy of Forensic Sciences (AAFS) Digital and Multi-media Listserv.
 +
<i> (Subscribe by sending an email to listserv@lists.mitre.org with message body containing SUBSCRIBE AAFS-DIGITAL-MULTIMEDIA-LIST)</i>
 +
Requests for additions, deletions or corrections to this list may be sent by email to David Baker <i>(bakerd AT mitre.org)</i>.
  
Early versions of the UICC used full-size smart cards (85mm x 54mm x 0.76mm). The card has since been shrunk to the standard size of 25mm x 15mm x 0.76mm.
+
== Calls For Papers ==
 +
{| border="0" cellpadding="2" cellspacing="2" align="top"
 +
|- style="background:#bfbfbf; font-weight: bold"
 +
! Title
 +
! Due Date
 +
! Website
 +
|-
 +
|ToorCon 9
 +
|Sep 09, 2007
 +
|http://toorcon.org/cfp.php
 +
|-
 +
|2nd Small Scale Digital Device Forensics Journal
 +
|Oct 31, 2007
 +
|http://ssddfj.org/submit.asp
 +
|-
 +
|Usenix Annual Technical Conference
 +
|Jan 07, 2008 (11:59PM PST)
 +
|http://www.usenix.com/events/usenix08/cfp/
 +
|-
 +
|Techno-Security 2008
 +
|May 08, 2008
 +
|http://www.techsec.com/html/TechnoPapers.html
 +
|-
 +
|}
  
 +
== Conferences ==
 +
{| border="0" cellpadding="2" cellspacing="2" align="top"
 +
|- style="background:#bfbfbf; font-weight: bold"
 +
! Title
 +
! Date/Location
 +
! Website
 +
|-
 +
|Recent Advances in Intrusion Detection (RAID) 2007
 +
|Sep 05-07, Gold Coast, Queensland, Australia
 +
|http://www.isi.qut.edu.au/events/conferences/raid07
 +
|-
 +
|14th International Conference on Image Analysis and Processing (ICIAP 2007)
 +
|Sep 10-14, Modena, Italy
 +
|http://www.iciap2007.org
 +
|-
 +
|3rd International Conference on IT-Incident Management & IT-Forensics
 +
|Sep 11-12, Stuttgart, Germany
 +
|http://www.imf-conference.org/
 +
|-
 +
|ForenSec Canada 2007
 +
|Sep 17-18, Regina, Saskatchewan, Canada
 +
|http://www.csiservices.ca/events.html#ForenSec
 +
|-
 +
|SANS Network Security
 +
|Sep 22-30, Las Vegas, NV
 +
|http://www.sans.org/ns2007/?portal=69456f95660ade45be29c00b0c14aea1
 +
|-
 +
|Black and White Ball
 +
|Sep 25-28, London, UK
 +
|http://www.theblackandwhiteball.co.uk/
 +
|-
 +
|Wisconsin Association of Computer Crimes Investigators/Forensic Association of Computer Technologists
 +
|Sep 26-28, Milwaukee, WI
 +
|http://www.byteoutofcrime.org
 +
|-
 +
|6th Annual Internet Crimes Against Children National Conference
 +
|Oct 15-18, San Jose, CA
 +
|http://www.icactraining.org/website/registration.html
 +
|-
 +
|ToorCon 9
 +
|Oct 19-21, San Diego, CA
 +
|http://toorcon.org/intro.php
 +
|-
 +
|BlackHat Japan - Briefings
 +
|Oct 23-26, Tokyo, Japan
 +
|http://www.blackhat.com/html/bh-japan-07/bh-jp-07-main.html
 +
|-
 +
|Global Conference on Economic and High-Tech Crime (NW3C Membership Required)
 +
|Oct 24-26, Crystal City, VA
 +
|https://conference.nw3c.org/index.cfm
 +
|-
 +
|European Network Forensic and Security Conference 2007
 +
|Oct 24-26,  Zuyd University, Heerlen, Netherlands
 +
|http://www.enfsc2007.com/
 +
|-
 +
|Techno-Forensics Conference
 +
|Oct 29 - 31, Rockville, MD
 +
|http://www.techsec.com/html/TechnoForensics2007.html
 +
|-
 +
|Computer Security Institute Annual Meeting
 +
|Nov 3-9, Arlington, VA
 +
|http://www.csiannual.com/
 +
|-
 +
|First Forensic Forum Conference (F3 Conference)
 +
|Nov 3-5, Tortworth, England
 +
|http://www.f3.org.uk/
 +
|-
 +
|DeepSec IDSC
 +
|Nov 22-24, Vienna, Austria
 +
|http://deepsec.net/
 +
|-
 +
|Digital Forensic Forum Prague 2007
 +
|Nov 26-27, Prague, Czech Republic
 +
|http://www.dff-prague.com/
 +
|-
 +
|PacSec Applied Security Conference
 +
|Nov 29-30, Tokyo, Japan
 +
|http://www.pacsec.jp/index.html
 +
|-
 +
|SANS Security 2008
 +
|Jan 11-19, New Orleans, LA
 +
|http://www.sans.org/security08/
 +
|-
 +
|DoD Cyber Crime Conference 2008
 +
|Jan 13-18, St. Louis, MO
 +
|http://www.dodcybercrime.com/
 +
|-
 +
|AAFS Annual Meeting 2008
 +
|Feb 18-23, Washington, DC
 +
|http://aafs.org/default.asp?section_id=meetings&page_id=aafs_annual_meeting
 +
|-
 +
|CanSecWest Security Conference 2008
 +
|Mar 19-21, Vanouver, BC, Canada
 +
|http://cansecwest.com/
 +
|-
 +
|EuSecWest Security Conference 2008
 +
|May 21-22, London, England
 +
|http://eusecwest.com/
 +
|-
 +
|Techno-Security 2008
 +
|Jun 01-04, Myrtle Beach, SC
 +
|http://www.techsec.com/html/Techno2008.html
 +
|-
 +
|Usenix Annual Technical Conference
 +
|Jun 22-27, Boston, MA
 +
|http://www.usenix.com/events/usenix08/
 +
|-
 +
|}
  
Although UICC cards traditionally held just 16 to 64KB of memory, the recent trend has been to produce SIM cards with larger storage capacities, ranging from 512MB up to [http://www.m-systems.com/site/en-US/ M-Systems'] 1GB SIM Card slated for release in late 2006.
+
== On-going / Continuous Training ==
 +
{| border="0" cellpadding="2" cellspacing="2" align="top"
 +
|- style="background:#bfbfbf; font-weight: bold"
 +
! Title
 +
! Date/Location or Venue
 +
! Website
 +
|-
 +
|Basic Computer Examiner Course - Computer Forensic Training Online
 +
|Distance Learning Format
 +
|http://www.cftco.com
 +
|-
 +
|Linux Data Forensics Training
 +
|Distance Learning Format
 +
|http://www.crazytrain.com/training.html
 +
|-
 +
|SANS On-Demand Training
 +
|Distance Learning Format
 +
|http://www.sans.org/ondemand/?portal=69456f95660ade45be29c00b0c14aea1
 +
|-
 +
|MaresWare Suite Training
 +
|First full week every month, Atlanta, GA
 +
|http://www.maresware.com/maresware/training/maresware.htm
 +
|-
 +
|Evidence Recovery for Windows Vista&trade;
 +
|First full week every month, Brunswick, GA
 +
|http://www.internetcrimes.net
 +
|-
 +
|Evidence Recovery for Windows Server&reg; 2003 R2
 +
|Second full week every month, Brunswick, GA
 +
|http://www.internetcrimes.net
 +
|-
 +
|Evidence Recovery for the Windows XP&trade; operating system
 +
|Third full week every month, Brunswick, GA
 +
|http://www.internetcrimes.net
 +
|-
 +
|Computer Forensics Training and CCE&trade; Testing for Litigation Support Professionals
 +
|Third weekend of every month (Fri-Mon), Dallas, TX
 +
|http://www.md5group.com
 +
|-
 +
|}
  
== ICCID ==
+
== Scheduled Training Courses ==
 
+
{| border="0" cellpadding="2" cellspacing="2" align="top"
Each SIM is internationally identified by its ICC-ID (Integrated Circuit Card ID). ICC-IDs are stored in the SIM card and can also be engraved or printed on the SIM card’s body during a process called personalization. The number is up to 18 digits long with an addition of a single “check digit” that is used for error detection. This single digit allows us to detect an input error of digits, mistyped digits or a permutation of two successive digits.   This digit was calculated using the Luhn algorithm.
+
|- style="background:#bfbfbf; font-weight: bold"
 
+
! Title
A typical SIM (19 digits) example 89 91 10 1200 00 320451 0, provide several details as follows:
+
! Date/Location
 
+
! Website
*The first two digits (89 in the example) refers to the Telecom Id.
+
! Limitation
*The next two digits (91 in the example) refers to the country code (91-India).
+
|-
*The next two digits (10 in the example) refers to the network code.
+
|EnCase v6 Computer Forensics II
*The next four digits (1200 in the example) refers to the month and year of manufacturing.
+
|Aug 21-24, Houston, TX
*The next two digits (00 in the example) refers to the switch configuration code.
+
|http://www.guidancesoftware.com/training/course_schedule.aspx
*The next six digits (320451 in the example) refers to the SIM number.
+
|-
*The last digit which is separated from the rest is called the “check digit”.
+
|EnCase v6 FIM/Mobile Use of EE Live Forensics
 
+
|Aug 21-24, Melbourne, Australia
 
+
|http://www.guidancesoftware.com/training/course_schedule.aspx
These digits can be further grouped for additional information:
+
|-
*The first 3 to 4 digits represents the Mobile Country Code (MCC) 
+
|EnCase v6 NTFS
**(Some cards only have 3 digits to represent the Telecom ID and country code.)
+
|Aug 21-24, Washington DC
*The next 2 digits represent the Mobile Network Code (MNC, AKA the mobile operator)
+
|http://www.guidancesoftware.com/training/course_schedule.aspx
*The next 12 digits is the number represent the Home Location Register
+
|-
*And mentioned above, the “check digit”
+
|EnCase v6 Computer Forensics I
 
+
|Aug 21-24, Chicago, IL
== Location Area Identity==
+
|http://www.guidancesoftware.com/training/course_schedule.aspx
 
+
|-
Operation networks for cell phone devices are divided into area locations called Location Areas. Each location is identified with its own unique identification number creating the LAI (Location Area Identity). A phone will store this number on its SIM card so it knows what location it’s in and to be able to receive service. If a phone were to change to a new Location Area, it stores the new LAI in the SIM card, adding to a list of all the previous LAIs it has been in. This way if a phone is powered down, when it boots back up, it can search its list of LAIs it has stored until it finds the one its in and can start to receive service again. This is much quicker than scanning the whole list of frequencies that a telephone can have access on.
+
|EnCase v6 Advanced Internet Examinations
This is a real plus for forensic investigators because when a SIM card is reviewed, they can get a general idea of where the SIM card has been geographically. In turn this tells them where the phone has been and can then relate back to where the individual who owns the phone has been.  
+
|Aug 21-24, Los Angeles, CA
 
+
|http://www.guidancesoftware.com/training/course_schedule.aspx
== SIM Security ==
+
|-
 
+
|EnCase Enterprise v6 - Phase II
Information inside the UICC can be protected with a PIN and a PUK.
+
|Aug 21-24, United Kingdom
 
+
|http://www.guidancesoftware.com/training/course_schedule.aspx
A PIN locks the SIM card until correct code is entered. Each phone network sets the PIN of SIM to a standard default number (this can be changed via handset). If PIN protection is enabled, the PIN will need to be entered each time phone is switched on. If the PIN is entered incorrectly 3 times in a row, the SIM card will be blocked requiring a PUK from the network/service provider.
+
|-
 
+
|SARC Steganography Examiner Training
A PUK is needed if the PIN is entered incorrectly 3 times and the SIM is blocked (phone is unable to make and receive calls/texts). The PUK can be received from the network provider, or possibly the GSM cell phone manual. '''Caution:''' if PUK is entered 10 times incorrectly, the SIM card is permanently disabled and must be exchanged.
+
|Aug 24-25, San Diego, CA (HTCIA Conference 2007)
 
+
|http://www.sarc-wv.com/training.aspx
== SIM Forensics ==
+
|-
 
+
|EnCase v6 Computer Forensics II
The data that a SIM card can provide the forensics examiner can be invaluable to an investigation. Acquiring a SIM card allows a large amount of information that the suspect has dealt with over the phone to be investigated.
+
|Aug 28-31, Los Angeles, CA
 
+
|http://www.guidancesoftware.com/training/course_schedule.aspx
In general, some of this data can help an investigator determine:
+
|-
* Phone numbers of calls made/received
+
|EnCase v6 Computer Forensics I
* Contacts
+
|Aug 28-31, Singapore
* [[SMS]] details (time/date, recipient, etc.)
+
|http://www.guidancesoftware.com/training/course_schedule.aspx
* SMS text (the message itself)
+
|-
 
+
|EnCase v6 Computer Forensics I
There are many software solutions that can help the examiner to acquire the information from the SIM card. Several products include 3GForensics SIMIS [http://www.3gforensics.co.uk/products.htm], Inside Out's [http://simcon.no/ SIMCon], or SIM Content Controller, and Paraben Forensics' [http://www.paraben-forensics.com/catalog/product_info.php?products_id=289 SIM Card Seizure].
+
|Aug 28-31, Savannah, Georgia
 
+
|http://www.guidancesoftware.com/training/course_schedule.aspx
The SIM file system is hierarchical in nature consisting of 3 parts:
+
|-
*Master File (MF) - root of the file system that contains
+
|EnCase v6 Advanced Internet Examinations
DF’s and EF’s
+
|Aug 28-31, Washington DC
*Dedicated File (DF)
+
|http://www.guidancesoftware.com/training/course_schedule.aspx
*Elementary Files (EF)
+
|-
 
+
|EnCase v6 Computer Forensics I - Private Sector
 
+
|Aug 28-31, Houston, TX
=== Data Acquisition ===
+
|http://www.guidancesoftware.com/training/course_schedule.aspx
 
+
|-
These software titles can extract such technical data from the SIM card as:
+
|Helix Live Forensics and Incident Response Course
 
+
|Aug 28-30, Tennessee Bureau of Investigations - Nashville, TN
* '''International Mobile Subscriber Identity (IMSI)''': A unique identifying number that identifies the phone/subscription to the [[GSM]] network
+
|https://www.e-fense.com/register.php
* '''Mobile Country Code (MCC)''': A three-digit code that represents the SIM card's country of origin
+
|-
* '''Mobile Network Code (MNC)''': A two-digit code that represents the SIM card's home network
+
|Paraben Cellular/GPS Signal Analysis
* '''Mobile Subscriber Identification Number (MSIN)''': A unique ten-digit identifying number that identifies the specific subscriber to the GSM network
+
|Aug 30-31, Potomac Falls, VA
* '''Mobile Subscriber International ISDN Number (MSISDN)''': A number that identifies the phone number used by the headset
+
|http://www.paraben-training.com/
* '''Abbreviated Dialing Numbers (ADN)''': Telephone numbers stored in sims memory
+
|-
* '''Last Dialed Numbers (LDN)'''
+
|SMART for Linux
* '''Short Message Service (SMS)''': Text Messages
+
|Sep 03-06, Austin, TX
* '''Public Land Mobile Network (PLMN) selector'''
+
|http://asrdata.com/training/training2.html
* '''Forbidden PLMNs'''
+
|-
* '''Location Information (LOCI)'''
+
|Paraben Handheld Forensic Course
* '''General Packet Radio Service (GPRS) location'''
+
|Sep 04-07, Mississauga, Ontario, Canada
* '''Integrated Circuit Card Identifier (ICCID)'''
+
|http://www.paraben-training.com/
* '''Service Provider Name (SPN)'''
+
|-
* '''Phase Identification'''
+
|EnCase v6 Computer Forensics II – Private Sector
* '''SIM Service Table (SST)'''
+
|Sep 04-07, Houston, TX
* '''Language Preference (LP)'''
+
|http://www.guidancesoftware.com/training/course_schedule.aspx
* '''Card Holder Verification (CHV1) and (CHV2)'''
+
|-
* '''Broadcast Control Channels (BCCH)'''
+
|EnCase v6 Computer Forensics I
* '''Ciphering Key (Kc)'''
+
|Sep 04-07, Melbourne, Australia and United Kingdom
* '''Ciphering Key Sequence Number'''
+
|http://www.guidancesoftware.com/training/course_schedule.aspx
* '''Emergency Call Code'''
+
|-
* '''Fixed Dialing Numbers (FDN)'''
+
|EnCase v6 FIM/Mobile Use of EE Live Forensics
* '''Forbidden PLMNs'''
+
|Sep 04-07, The Netherlands
* '''Local Area Identitity (LAI)'''
+
|http://www.guidancesoftware.com/training/course_schedule.aspx
* '''Own Dialing Number'''
+
|-
* '''Temporary Mobile Subscriber Identity (TMSI)'''
+
|EnCase v6 Computer Forensics II
* '''Routing Area Identifier (RIA) netowrk code'''
+
|Sep 04-07, Austin, TX
* '''Service Dialing Numbers (SDNs)'''
+
|http://www.guidancesoftware.com/training/course_schedule.aspx
* '''Service Provider Name'''
+
|-
* '''Depersonalizatoin Keys'''
+
|AccessData BootCamp
 
+
|Sep 04-06, Mississippi State University
This information can be used to contact the service provider to obtain even more information than is stored on the SIM card.
+
|http://www.security.cse.msstate.edu/ftc/schedule.php
 
+
|Limited to Law Enforcement
== USIM-Universal Subscriber Identity Module ==
+
|-
 
+
|Computer Forensics Training and CCE&trade; Testing for Litigation Support Professionals
A Universal Subscriber Identity Module is an application for UMTS mobile telephony running on a UICC smart card which is inserted in a 3G mobile phone. There is a common misconception to call the UICC card itself a USIM, but the USIM is merely a logical entity on the physical card.
+
|Sep 07-10, New York City, NY
 
+
|http://www.md5group.com
It stores user subscriber information, authentication information and provides storage space for text messages and phone book contacts. The phone book on a UICC has been greatly enhanced.
+
|-
 
+
|Paraben E-Discovery: E-mail & Mobile E-mail Devices
For authentication purposes, the USIM stores a long-term preshared secret key K, which is shared with the Authentication Center (AuC) in the network. The USIM also verifies a sequence number that must be within a range using a window mechanism to avoid replay attacks, and is in charge of generating the session keys CK and IK to be used in the confidentiality and integrity algorithms of the KASUMI block cipher in Universal Mobile Telecommunications System (UMTS).
+
|Sep 10-14, Potomac Falls, VA
 
+
|http://www.paraben-training.com/
In Mobile Financial Services, USIM seems to be a mandetory Security Element for user authentication, authorization and stored credentials. With the integration of NFC Handset and USIM, users will be able to make proximity payments where the NFS handset enables contactless payment and USIM enables independent security element.
+
|-
This is the evolution of the SIM for 3G devices. It can allow for multiple phone numbers to be assigned to the USIM, thus giving more than one phone number to a device.
+
|Paraben Advanced Cell Phone Forensics
 
+
|Sep 10-12, San Diego, CA
== Service Provider Data ==
+
|http://www.paraben-training.com/
 
+
|-
Some additional information the service provider might store:
+
|EnCase v6 Computer Forensics II
 
+
|Sep 11-14, United Kingdom and Singapore
* A customer database
+
|http://www.guidancesoftware.com/training/course_schedule.aspx
* [[Call Detail Record]]s (CDR)
+
|-
* [[Home Location Register]] (HLR)
+
|EnCase v6 Computer Forensics I
 
+
|Sep 11-14, Houston, TX and Washington, DC
 
+
|http://www.guidancesoftware.com/training/course_schedule.aspx
== Service Providers that use SIM Cards in the United States ==
+
|-
* T-Mobile
+
|EnCase Enterprise v6 - Phase I
* Cingular/AT&T
+
|Sep 11-14, Chicago, IL
 
+
|http://www.guidancesoftware.com/training/course_schedule.aspx
== Sim Card Text Encoding ==
+
|-
 
+
|EnCase v6 Computer Forensics I - Private Sector
Originally the middle-European [[GSM]] network used only a 7-bit code derived from the basic [[ASCII]] code. However as GSM spread worldwide it was concluded that more characters, such as the major characters of all living languages, should be able to be represented on GSM phones. Thus, there was a movement towards a 16-bit code known as [[UCS-2]] which is now the standard in GSM text encoding. This change in encoding can make it more difficult to accurately obtain data form [[SIM cards]] of the older generation which use the 7-bit encoding. This encoding is used to compress the hexadecimal size of certain elements of the SIMs data, particularly in [[SMS]] and [[Abbreviated Dialing Numbers]].
+
|Sep 11-14, Los Angeles, CA
 
+
|http://www.guidancesoftware.com/training/course_schedule.aspx
== Authentication Key (Ki) ==
+
|-
The authentication key or Ki is a 128 bit key used in the authentication and cipher key generation process. In a nutshell, the key is used to authenticate the SIM on the GSM network. Each SIM contains this key which is assigned to it by the operator during the personalization process. The SIM card is specially designed so the Ki can't be compromised using a smart-card interface. However, flaws in the GSM cryptography have been discovered that do allow the extraction of the Ki from the SIM card, and essentially SIM card duplication.
+
|First Responder to Digital Evidence Program (FRDE)
 
+
|Sep 11-13, FLETC, Glynco, GA
== See also ==
+
|http://www.fletc.gov/training/programs/computer-financial-investigations/technology-investigation/
 
+
|Limited to Law Enforcement
* [[SIM Card Forensics]]
+
|-
 
+
|AccessData Applied Decryption
== References ==
+
|Sep 11-13, Dallas, TX
 
+
|http://www.accessdata.com/training
* [http://www.simcon.no/ SIMCon]
+
|-
* [http://www.sectorforensics.co.uk/sim-examination.shtml Sector Forensics]
+
|Paraben Advanced SIM Card Forensics
* [http://www.utica.edu/academic/institutes/ecii/ijde/articles.cfm?action=issue&id=5  IJDE Spring 2003 Volume 2, Issue 1 ]: [http://www.utica.edu/academic/institutes/ecii/publications/articles/A0658858-BFF6-C537-7CF86A78D6DE746D.pdf Forensics and the GSM Mobile Telephone System] (PDF)
+
|Sep 13-14, San Diego, CA
* http://en.wikipedia.org/wiki/Subscriber_Identity_Module
+
|http://www.paraben-training.com/
 +
|-
 +
|Paraben Network Incident Response
 +
|Sep 17-21, Potomac Falls, VA
 +
|http://www.paraben-training.com/
 +
|-
 +
|Enterprise Data Forensics
 +
|Sep 17-19, Austin, TX
 +
|http://asrdata.com/training/training2.html
 +
|-
 +
|EnCase v6 Computer Forensics II – Private Sector
 +
|Sep 18-21, Los Angeles, CA
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Computer Forensics II
 +
|Sep 18-21, Houston, TX and Leipzig, Germany
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Advanced Computer Forensics
 +
|Sep 18-21, Sydney, Australia and United Kingdom
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Computer Forensics I
 +
|Sep 18-21, Toronto, Canada
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|Paraben Cellular/GPS Signal Analysis
 +
|Sep 20-21, San Diego, CA
 +
|http://www.paraben-training.com/
 +
|-
 +
|Internet Investigations Training Program (IITP)
 +
|Sep 24-28, Glynco, GA
 +
|http://www.fletc.gov/training/programs/computer-financial-investigations/technology-investigation
 +
|Limited to Law Enforcement
 +
|-
 +
|Macintosh Forensic Survival Course
 +
|Sep 24-28, Santa Ana, CA
 +
|http://www.phoenixdatagroup.com/cart/index.php
 +
|-
 +
|BlackBag Introductory MacIntosh Forensics
 +
|Sep 24-28, Richmond, VA
 +
|http://www.blackbagtech.com/products/training.htm
 +
|Limited to Law Enforcement
 +
|-
 +
|Paraben Advanced Cell Phone Forensics
 +
|Sep 24-26, Potomac Falls, VA
 +
|http://www.paraben-training.com/
 +
|-
 +
|Introduction to Cyber Crime
 +
|Sep 24-26, Jackson, Mississippi
 +
|http://www.security.cse.msstate.edu/ftc/schedule.php
 +
|Limited to Law Enforcement
 +
|-
 +
|EnCase v6 FIM/Mobile Use of EE Live Forensics
 +
|Sep 25-28, United Kingdom
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Computer Forensics I - Private Sector
 +
|Sep 25-28, Houston, TX
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Advanced Computer Forensics
 +
|Sep 25-28, Los Angeles, CA
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Computer Forensics II
 +
|Sep 25-28, Toronto, Ontario, Canada
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|AccessData Applied Decryption
 +
|Sep 25-27, Chicago, IL
 +
|http://www.accessdata.com/training
 +
|-
 +
|AccessData BootCamp
 +
|Sep 25-27, Solna, SE
 +
|http://www.accessdata.com/training
 +
|-
 +
|Forensics Tools and Techniques
 +
|Sep 26-28, Jackson, Mississippi
 +
|http://www.security.cse.msstate.edu/ftc/schedule.php
 +
|Limited to Law Enforcement
 +
|-
 +
|Paraben Advanced SIM Card Forensics
 +
|Sep 27-28, Potomac Falls, VA
 +
|http://www.paraben-training.com/
 +
|-
 +
|SMART for Linux
 +
|Oct 01-04, Austin, TX
 +
|http://asrdata.com/training/training2.html
 +
|-
 +
|Paraben Wireless Forensics
 +
|Oct 01-03, San Diego, CA
 +
|http://www.paraben-training.com/
 +
|-
 +
|EnCase v6 Computer Forensics I - Private Sector
 +
|Oct 02-05, Chicago, IL
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 FIM/Mobile Use of EE Live Forensics
 +
|Oct 02-05, Los Angeles, CA, Washington, DC and Perth, Australia
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Computer Forensics II – Private Sector
 +
|Oct 02-05, Houston, TX
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Computer Forensics I
 +
|Oct 02-05, The Netherlands
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 EnScript Programming - Phase II
 +
|Oct 02-05, Washington DC
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Advanced Internet Examinations
 +
|Oct 02-05, Toronto, Canada
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|Paraben Cellular/GPS Signal Analysis
 +
|Oct 04-05, Potomac Falls, VA
 +
|http://www.paraben-training.com/
 +
|-
 +
|Computer Forensics Training and CCE&trade; Testing for Litigation Support Professionals
 +
|Oct 05-08, Denver, CO
 +
|http://www.md5group.com
 +
|-
 +
|Paraben Handheld Forensic Course
 +
|Oct 08-11, San Diego, CA and Potomac Falls, VA
 +
|http://www.paraben-training.com/
 +
|-
 +
|SMART Windows Data Forensics
 +
|Oct 08-10, Austin, TX
 +
|http://asrdata.com/training/training2.html
 +
|-
 +
|EnCase v6 Network Intrusion Investigations - Phase I
 +
|Oct 09-12, Los Angeles, CA and The Netherlands
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 FIM/Mobile Use of EE Live Forensics
 +
|Oct 09-12, Sydney, Australia
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Computer Forensics I
 +
|Oct 09-12, Houston, TX
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Advanced Internet Examinations
 +
|Oct 09-12, Washington, DC and United Kingdom
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Advanced Computer Forensics
 +
|Oct 09-12, Washington DC
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Computer Forensics II – Private Sector
 +
|Oct 09-12, Chicago, IL
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|Computer Forensics Training and CCE&trade; Testing for Litigation Support Professionals
 +
|Oct 12-15, Dallas, TX
 +
|http://www.md5group.com
 +
|-
 +
|Digital Evidence Acquisition Specialist Training Program (DEASTP)
 +
|Oct 15-26, FLETC, Glynco, GA
 +
|http://www.fletc.gov/training/programs/computer-financial-investigations/technology-investigation/
 +
|Limited to Law Enforcement
 +
|-
 +
|BlackBag Introductory MacIntosh Forensics
 +
|Oct 15-19, Tacoma, WA
 +
|http://www.blackbagtech.com/products/training.htm
 +
|-
 +
|Paraben E-Discovery: E-mail & Mobile E-mail Devices
 +
|Oct 15-19, Mississauga, Ontario, Canada
 +
|http://www.paraben-training.com/
 +
|-
 +
|Macintosh Forensic Survival Course
 +
|Oct 15-19, Philadelphia, PA
 +
|http://www.phoenixdatagroup.com/cart/index.php
 +
|-
 +
|EnCase v6 Network Intrusion Investigations - Phase II
 +
|Oct 15-18, Los Angeles, CA
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|Paraben Advanced Cell Phone Forensics
 +
|Oct 15-17, Mississauga, Ontario, Canada
 +
|http://www.paraben-training.com/
 +
|-
 +
|EnCase v6 Computer Forensics I - Private Sector
 +
|Oct 16-19, Washington DC
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Network Intrusion Investigations - Phase I
 +
|Oct 16-19, United Kingdom
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Computer Forensics II
 +
|Oct 16-19, Washington DC and Houston, TX
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Advanced Computer Forensics
 +
|Oct 16-19, Chicago, IL
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase Enterprise v6 - Phase II
 +
|Oct 16-19, Chicago, IL
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Network Intrusion Investigations - Phase II
 +
|Oct 16-19, The Netherlands
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Advanced Internet Examinations
 +
|Oct 16-19, Austin, TX
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 EnScript Programming - Phase I
 +
|Oct 16-19, Toronto, Canada
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|Paraben Advanced SIM Card Forensics
 +
|Oct 18-19, Mississauga, Ontario, Canada
 +
|http://www.paraben-training.com/
 +
|-
 +
|X-Ways Forensics
 +
|Oct 22-24, Hong Kong
 +
|http://www.x-ways.net/training/hong_kong.html
 +
|-
 +
|EnCase v6 Computer Forensics II
 +
|Oct 23-26, Toronto, Canada
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Advanced Internet Examinations
 +
|Oct 23-26, Canberra, Australia
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Computer Forensics I - Private Sector
 +
|Oct 23-26, Houston, TX
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Computer Forensics I
 +
|Oct 23-26, Los Angeles, CA and Singapore
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase eDiscovery with v6
 +
|Oct 23-26, Washington DC
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Computer Forensics II – Private Sector
 +
|Oct 23-26, Washington DC
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|File Systems Revealed
 +
|Oct 25-26, Hong Kong
 +
|http://www.x-ways.net/training/hong_kong.html
 +
|-
 +
|SARC Steganography Examiner Training
 +
|Oct 26 - 27, Gaithersburg, MD (Techno Forensics Conference 2007)
 +
|http://www.sarc-wv.com/training.aspx
 +
|-
 +
|Seized Computer Evidence Recovery Specialist (SCERS)
 +
|Oct 29-Nov 9, FLETC, Glynco, GA
 +
|http://www.fletc.gov/training/programs/computer-financial-investigations/technology-investigation/
 +
|Limited to Law Enforcement
 +
|-
 +
|Search and Seizure of Computers and Electronic Evidence
 +
|Oct 29-30, Oxford, MS
 +
|http://www.security.cse.msstate.edu/ftc/schedule.php
 +
|Limited to Law Enforcement
 +
|-
 +
|EnCase v6 Computer Forensics II
 +
|Oct 30-Nov 02, Los Angeles, CA and The Netherlands
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Advanced Computer Forensics
 +
|Oct 30-Nov 02, Washington DC and Toronto, Ontario, Canada
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Computer Forensics I - Private Sector
 +
|Oct 30-Nov 02, United Kingdom
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Network Intrusion Investigations - Phase I
 +
|Oct 30-Nov 02, Chicago, IL
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase Enterprise v6 - Phase I
 +
|Oct 30-Nov 02, Washington DC
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Computer Forensics II – Private Sector
 +
|Oct 30-Nov 02, Houston, TX
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|Paraben Handheld Forensic Course
 +
|Nov 05-08, Mississauga, Ontario, Canada
 +
|http://www.paraben-training.com/
 +
|-
 +
|SMART for Linux
 +
|Nov 05-08, Austin, TX
 +
|http://asrdata.com/training/training2.html
 +
|-
 +
|EnCase v6 Network Intrusion Investigations - Phase II
 +
|Nov 05-08, Chicago, IL
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase Enterprise v6 - Phase II
 +
|Nov 05-08, Washington DC
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|Introduction to Cyber Crime
 +
|Nov 05-07, Jackson, Mississippi
 +
|http://www.security.cse.msstate.edu/ftc/schedule.php
 +
|Limited to Law Enforcement
 +
|-
 +
|EnCase v6 Computer Forensics II – Private Sector
 +
|Nov 06-09, United Kingdom
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Advanced Computer Forensics
 +
|Nov 06-09, Los Angeles, CA
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 NTFS
 +
|Nov 06-09, Washington DC
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Computer Forensics II
 +
|Nov 06-09, Houston, TX
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|AccessData BootCamp
 +
|Nov 06-08, Austin, TX
 +
|http://www.accessdata.com/training
 +
|-
 +
|AccessData Windows Forensics
 +
|Nov 06-08, Solna, Sweden
 +
|http://www.accessdata.com/training
 +
|-
 +
|Forensics Tools and Techniques
 +
|Nov 07-09, Jackson, Mississippi
 +
|http://www.security.cse.msstate.edu/ftc/schedule.php
 +
|Limited to Law Enforcement
 +
|-
 +
|SMART Linux Data Forensics
 +
|Nov 12-14, Austin, TX
 +
|http://asrdata.com/training/training2.html
 +
|-
 +
|EnCase v6 Computer Forensics I - Private Sector
 +
|Nov 13-16, Houston, TX
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Advanced Computer Forensics
 +
|Nov 13-16, The Netherlands and United Kingdom
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Computer Forensics I
 +
|Nov 13-16, Sydney, Australia and Singapore
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Advanced Internet Examinations
 +
|Nov 13-16, Chicago, IL and Los Angeles, CA
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Computer Forensics II
 +
|Nov 13-16, Washington DC
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|AccessData BootCamp
 +
|Nov 13-15, Mississippi State University
 +
|http://www.security.cse.msstate.edu/ftc/schedule.php
 +
|Limited to Law Enforcement
 +
|-
 +
|EnCase v6 Computer Forensics II
 +
|Nov 20-23, Toronto, Canada
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 FIM/Mobile Use of EE Live Forensics
 +
|Nov 20-23, Vancouver, BC
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 NTFS
 +
|Nov 27-30, Vancouver, BC
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Network Intrusion Investigations - Phase I
 +
|Nov 27-30, Sydney, Australia
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Computer Forensics II – Private Sector
 +
|Nov 27-30, Houston, TX
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Computer Forensics I
 +
|Nov 27-30, Washington DC
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase eDiscovery with v6
 +
|Nov 27-30, Los Angeles, CA
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|Computer Network Investigation Training Program (CNITP)
 +
|Dec 03-14, Glynco, GA
 +
|http://www.fletc.gov/training/programs/computer-financial-investigations/technology-investigation
 +
|Limited to Law Enforcement
 +
|-
 +
|Internet Investigations Training Program (IITP)
 +
|Dec 03-07, Glynco, GA
 +
|http://www.fletc.gov/training/programs/computer-financial-investigations/technology-investigation
 +
|Limited to Law Enforcement
 +
|-
 +
|SMART for Linux
 +
|Dec 03-06, Austin, TX
 +
|http://asrdata.com/training/training2.html
 +
|-
 +
|Introduction to Cyber Crime
 +
|Dec 03-05, Mississippi State University
 +
|http://www.security.cse.msstate.edu/ftc/schedule.php
 +
|Limited to Law Enforcement
 +
|-
 +
|EnCase v6 Computer Forensics I
 +
|Dec 04-07, Chicago, IL; Los Angeles, CA; Houston, TX; and United Kingdom
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Network Intrusion Investigations - Phase I
 +
|Dec 04-07, Washington DC
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Computer Forensics II
 +
|Dec 04-07, Washington DC, Leipzig, Germany and Toronto, Ontario, Canada
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Advanced Internet Examinations
 +
|Dec 04-07, Vancouver, BC
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|AccessData Internet Forensics
 +
|Dec 04-06 , Solna, Sweden
 +
|http://www.accessdata.com/training
 +
|-
 +
|Forensics Tools and Techniques
 +
|Dec 05-07, Mississippi State University
 +
|http://www.security.cse.msstate.edu/ftc/schedule.php
 +
|Limited to Law Enforcement
 +
|-
 +
|EnCase v6 Network Intrusion Investigations - Phase II
 +
|Dec 10-13, Washington DC
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|Enterprise Data Forensics
 +
|Dec 10-12, Austin, TX
 +
|http://asrdata.com/training/training2.html
 +
|-
 +
|EnCase v6 Computer Forensics II
 +
|Dec 11-14, Chicago, IL; Houston, TX; Los Angeles, CA; United Kingdom; and Melbourne, Australia
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Advanced Computer Forensics
 +
|Dec 11-14, Washington DC
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|X-Ways Forensics
 +
|Dec 17-19, Singapore
 +
|http://www.x-ways.net/training/SGP.html
 +
|-
 +
|EnCase v6 Advanced Computer Forensics
 +
|Dec 17-20, Chicago, IL and Los Angeles, CA
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 FIM/Mobile Use of EE Live Forensics
 +
|Dec 17-20, Washington DC
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Advanced Internet Examinations
 +
|Dec 17-20, Washington, DC and United Kingdom
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 NTFS
 +
|Dec 17-20, Los Angeles, CA
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|Paraben Advanced Cell Phone Forensics
 +
|Dec 17-19, Mississauga, Ontario, Canada
 +
|http://www.paraben-training.com/
 +
|-
 +
|EnCase v6 Computer Forensics II – Private Sector
 +
|Dec 18-21, Houston, TX
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|Paraben Advanced SIM Card Forensics
 +
|Dec 20-21, Mississauga, Ontario, Canada
 +
|http://www.paraben-training.com/
 +
|-
 +
|}

Revision as of 06:49, 4 September 2007

PLEASE READ BEFORE YOU EDIT THE LISTS BELOW
Events should be posted in the correct section, and in date order. An event should NEVER be listed in more than one section (i.e. Ongoing/Continuous events should not be listed in Scheduled Training). When events begin the same day, events of a longer length should be listed first. New postings of events with the same date(s) as other events should be added after events already in the list. If a provider offers the same event at several locations simultaneously, the listing should have a single (ONE) entry in the list with the date(s) and ALL locations for the event. Please use three-letter month abbreviations (i.e. Sep, NOT Sept. or September), use two digit dates (i.e. Jan 01 NOT Jan 1), and use date ranges rather than listing every date during an event(i.e. Jan 02-05, NOT Jan 02, 03, 04, 05).
Some conferences or training opportunities may be limited to Law Enforcement Only or to a specific audience. Such restrictions should be noted when known.

This is a BY DATE listing of upcoming conferences and training events relevant to digital forensics. It is not an all inclusive list, but includes most well-known activities. Some events may duplicate events on the generic conferences page, but entries in this list have specific dates and locations for the upcoming event.

This listing is divided into four sections (described as follows):

  1. Calls For Papers - Calls for papers for either Journals or for Conferences, relevant to Digital Forensics (Name, Closing Date, URL)

  2. Conferences - Conferences relevant for Digital Forensics (Name, Date, Location, URL)

  3. On-Going / Continuous Training - Training opportunities that are either always available online/distance learning format or that are offered the same time every month (Name, date-if applicable, URL)

  4. Scheduled Training Courses - Training Classes/Courses that are scheduled for specific dates/locations. This would include online (or distance learning format) courses which begin on specific dates, instead of the "start anytime" courses listed in the previous section. (Name, Date(s), Location(s), URL)

The Conference and Training List is provided by the American Academy of Forensic Sciences (AAFS) Digital and Multi-media Listserv. (Subscribe by sending an email to listserv@lists.mitre.org with message body containing SUBSCRIBE AAFS-DIGITAL-MULTIMEDIA-LIST) Requests for additions, deletions or corrections to this list may be sent by email to David Baker (bakerd AT mitre.org).

Contents

Calls For Papers

Title Due Date Website
ToorCon 9 Sep 09, 2007 http://toorcon.org/cfp.php
2nd Small Scale Digital Device Forensics Journal Oct 31, 2007 http://ssddfj.org/submit.asp
Usenix Annual Technical Conference Jan 07, 2008 (11:59PM PST) http://www.usenix.com/events/usenix08/cfp/
Techno-Security 2008 May 08, 2008 http://www.techsec.com/html/TechnoPapers.html

Conferences

Title Date/Location Website
Recent Advances in Intrusion Detection (RAID) 2007 Sep 05-07, Gold Coast, Queensland, Australia http://www.isi.qut.edu.au/events/conferences/raid07
14th International Conference on Image Analysis and Processing (ICIAP 2007) Sep 10-14, Modena, Italy http://www.iciap2007.org
3rd International Conference on IT-Incident Management & IT-Forensics Sep 11-12, Stuttgart, Germany http://www.imf-conference.org/
ForenSec Canada 2007 Sep 17-18, Regina, Saskatchewan, Canada http://www.csiservices.ca/events.html#ForenSec
SANS Network Security Sep 22-30, Las Vegas, NV http://www.sans.org/ns2007/?portal=69456f95660ade45be29c00b0c14aea1
Black and White Ball Sep 25-28, London, UK http://www.theblackandwhiteball.co.uk/
Wisconsin Association of Computer Crimes Investigators/Forensic Association of Computer Technologists Sep 26-28, Milwaukee, WI http://www.byteoutofcrime.org
6th Annual Internet Crimes Against Children National Conference Oct 15-18, San Jose, CA http://www.icactraining.org/website/registration.html
ToorCon 9 Oct 19-21, San Diego, CA http://toorcon.org/intro.php
BlackHat Japan - Briefings Oct 23-26, Tokyo, Japan http://www.blackhat.com/html/bh-japan-07/bh-jp-07-main.html
Global Conference on Economic and High-Tech Crime (NW3C Membership Required) Oct 24-26, Crystal City, VA https://conference.nw3c.org/index.cfm
European Network Forensic and Security Conference 2007 Oct 24-26, Zuyd University, Heerlen, Netherlands http://www.enfsc2007.com/
Techno-Forensics Conference Oct 29 - 31, Rockville, MD http://www.techsec.com/html/TechnoForensics2007.html
Computer Security Institute Annual Meeting Nov 3-9, Arlington, VA http://www.csiannual.com/
First Forensic Forum Conference (F3 Conference) Nov 3-5, Tortworth, England http://www.f3.org.uk/
DeepSec IDSC Nov 22-24, Vienna, Austria http://deepsec.net/
Digital Forensic Forum Prague 2007 Nov 26-27, Prague, Czech Republic http://www.dff-prague.com/
PacSec Applied Security Conference Nov 29-30, Tokyo, Japan http://www.pacsec.jp/index.html
SANS Security 2008 Jan 11-19, New Orleans, LA http://www.sans.org/security08/
DoD Cyber Crime Conference 2008 Jan 13-18, St. Louis, MO http://www.dodcybercrime.com/
AAFS Annual Meeting 2008 Feb 18-23, Washington, DC http://aafs.org/default.asp?section_id=meetings&page_id=aafs_annual_meeting
CanSecWest Security Conference 2008 Mar 19-21, Vanouver, BC, Canada http://cansecwest.com/
EuSecWest Security Conference 2008 May 21-22, London, England http://eusecwest.com/
Techno-Security 2008 Jun 01-04, Myrtle Beach, SC http://www.techsec.com/html/Techno2008.html
Usenix Annual Technical Conference Jun 22-27, Boston, MA http://www.usenix.com/events/usenix08/

On-going / Continuous Training

Title Date/Location or Venue Website
Basic Computer Examiner Course - Computer Forensic Training Online Distance Learning Format http://www.cftco.com
Linux Data Forensics Training Distance Learning Format http://www.crazytrain.com/training.html
SANS On-Demand Training Distance Learning Format http://www.sans.org/ondemand/?portal=69456f95660ade45be29c00b0c14aea1
MaresWare Suite Training First full week every month, Atlanta, GA http://www.maresware.com/maresware/training/maresware.htm
Evidence Recovery for Windows Vista™ First full week every month, Brunswick, GA http://www.internetcrimes.net
Evidence Recovery for Windows Server® 2003 R2 Second full week every month, Brunswick, GA http://www.internetcrimes.net
Evidence Recovery for the Windows XP™ operating system Third full week every month, Brunswick, GA http://www.internetcrimes.net
Computer Forensics Training and CCE™ Testing for Litigation Support Professionals Third weekend of every month (Fri-Mon), Dallas, TX http://www.md5group.com

Scheduled Training Courses

Title Date/Location Website Limitation
EnCase v6 Computer Forensics II Aug 21-24, Houston, TX http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 FIM/Mobile Use of EE Live Forensics Aug 21-24, Melbourne, Australia http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 NTFS Aug 21-24, Washington DC http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Computer Forensics I Aug 21-24, Chicago, IL http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Advanced Internet Examinations Aug 21-24, Los Angeles, CA http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase Enterprise v6 - Phase II Aug 21-24, United Kingdom http://www.guidancesoftware.com/training/course_schedule.aspx
SARC Steganography Examiner Training Aug 24-25, San Diego, CA (HTCIA Conference 2007) http://www.sarc-wv.com/training.aspx
EnCase v6 Computer Forensics II Aug 28-31, Los Angeles, CA http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Computer Forensics I Aug 28-31, Singapore http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Computer Forensics I Aug 28-31, Savannah, Georgia http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Advanced Internet Examinations Aug 28-31, Washington DC http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Computer Forensics I - Private Sector Aug 28-31, Houston, TX http://www.guidancesoftware.com/training/course_schedule.aspx
Helix Live Forensics and Incident Response Course Aug 28-30, Tennessee Bureau of Investigations - Nashville, TN https://www.e-fense.com/register.php
Paraben Cellular/GPS Signal Analysis Aug 30-31, Potomac Falls, VA http://www.paraben-training.com/
SMART for Linux Sep 03-06, Austin, TX http://asrdata.com/training/training2.html
Paraben Handheld Forensic Course Sep 04-07, Mississauga, Ontario, Canada http://www.paraben-training.com/
EnCase v6 Computer Forensics II – Private Sector Sep 04-07, Houston, TX http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Computer Forensics I Sep 04-07, Melbourne, Australia and United Kingdom http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 FIM/Mobile Use of EE Live Forensics Sep 04-07, The Netherlands http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Computer Forensics II Sep 04-07, Austin, TX http://www.guidancesoftware.com/training/course_schedule.aspx
AccessData BootCamp Sep 04-06, Mississippi State University http://www.security.cse.msstate.edu/ftc/schedule.php Limited to Law Enforcement
Computer Forensics Training and CCE™ Testing for Litigation Support Professionals Sep 07-10, New York City, NY http://www.md5group.com
Paraben E-Discovery: E-mail & Mobile E-mail Devices Sep 10-14, Potomac Falls, VA http://www.paraben-training.com/
Paraben Advanced Cell Phone Forensics Sep 10-12, San Diego, CA http://www.paraben-training.com/
EnCase v6 Computer Forensics II Sep 11-14, United Kingdom and Singapore http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Computer Forensics I Sep 11-14, Houston, TX and Washington, DC http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase Enterprise v6 - Phase I Sep 11-14, Chicago, IL http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Computer Forensics I - Private Sector Sep 11-14, Los Angeles, CA http://www.guidancesoftware.com/training/course_schedule.aspx
First Responder to Digital Evidence Program (FRDE) Sep 11-13, FLETC, Glynco, GA http://www.fletc.gov/training/programs/computer-financial-investigations/technology-investigation/ Limited to Law Enforcement
AccessData Applied Decryption Sep 11-13, Dallas, TX http://www.accessdata.com/training
Paraben Advanced SIM Card Forensics Sep 13-14, San Diego, CA http://www.paraben-training.com/
Paraben Network Incident Response Sep 17-21, Potomac Falls, VA http://www.paraben-training.com/
Enterprise Data Forensics Sep 17-19, Austin, TX http://asrdata.com/training/training2.html
EnCase v6 Computer Forensics II – Private Sector Sep 18-21, Los Angeles, CA http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Computer Forensics II Sep 18-21, Houston, TX and Leipzig, Germany http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Advanced Computer Forensics Sep 18-21, Sydney, Australia and United Kingdom http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Computer Forensics I Sep 18-21, Toronto, Canada http://www.guidancesoftware.com/training/course_schedule.aspx
Paraben Cellular/GPS Signal Analysis Sep 20-21, San Diego, CA http://www.paraben-training.com/
Internet Investigations Training Program (IITP) Sep 24-28, Glynco, GA http://www.fletc.gov/training/programs/computer-financial-investigations/technology-investigation Limited to Law Enforcement
Macintosh Forensic Survival Course Sep 24-28, Santa Ana, CA http://www.phoenixdatagroup.com/cart/index.php
BlackBag Introductory MacIntosh Forensics Sep 24-28, Richmond, VA http://www.blackbagtech.com/products/training.htm Limited to Law Enforcement
Paraben Advanced Cell Phone Forensics Sep 24-26, Potomac Falls, VA http://www.paraben-training.com/
Introduction to Cyber Crime Sep 24-26, Jackson, Mississippi http://www.security.cse.msstate.edu/ftc/schedule.php Limited to Law Enforcement
EnCase v6 FIM/Mobile Use of EE Live Forensics Sep 25-28, United Kingdom http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Computer Forensics I - Private Sector Sep 25-28, Houston, TX http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Advanced Computer Forensics Sep 25-28, Los Angeles, CA http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Computer Forensics II Sep 25-28, Toronto, Ontario, Canada http://www.guidancesoftware.com/training/course_schedule.aspx
AccessData Applied Decryption Sep 25-27, Chicago, IL http://www.accessdata.com/training
AccessData BootCamp Sep 25-27, Solna, SE http://www.accessdata.com/training
Forensics Tools and Techniques Sep 26-28, Jackson, Mississippi http://www.security.cse.msstate.edu/ftc/schedule.php Limited to Law Enforcement
Paraben Advanced SIM Card Forensics Sep 27-28, Potomac Falls, VA http://www.paraben-training.com/
SMART for Linux Oct 01-04, Austin, TX http://asrdata.com/training/training2.html
Paraben Wireless Forensics Oct 01-03, San Diego, CA http://www.paraben-training.com/
EnCase v6 Computer Forensics I - Private Sector Oct 02-05, Chicago, IL http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 FIM/Mobile Use of EE Live Forensics Oct 02-05, Los Angeles, CA, Washington, DC and Perth, Australia http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Computer Forensics II – Private Sector Oct 02-05, Houston, TX http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Computer Forensics I Oct 02-05, The Netherlands http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 EnScript Programming - Phase II Oct 02-05, Washington DC http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Advanced Internet Examinations Oct 02-05, Toronto, Canada http://www.guidancesoftware.com/training/course_schedule.aspx
Paraben Cellular/GPS Signal Analysis Oct 04-05, Potomac Falls, VA http://www.paraben-training.com/
Computer Forensics Training and CCE™ Testing for Litigation Support Professionals Oct 05-08, Denver, CO http://www.md5group.com
Paraben Handheld Forensic Course Oct 08-11, San Diego, CA and Potomac Falls, VA http://www.paraben-training.com/
SMART Windows Data Forensics Oct 08-10, Austin, TX http://asrdata.com/training/training2.html
EnCase v6 Network Intrusion Investigations - Phase I Oct 09-12, Los Angeles, CA and The Netherlands http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 FIM/Mobile Use of EE Live Forensics Oct 09-12, Sydney, Australia http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Computer Forensics I Oct 09-12, Houston, TX http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Advanced Internet Examinations Oct 09-12, Washington, DC and United Kingdom http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Advanced Computer Forensics Oct 09-12, Washington DC http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Computer Forensics II – Private Sector Oct 09-12, Chicago, IL http://www.guidancesoftware.com/training/course_schedule.aspx
Computer Forensics Training and CCE™ Testing for Litigation Support Professionals Oct 12-15, Dallas, TX http://www.md5group.com
Digital Evidence Acquisition Specialist Training Program (DEASTP) Oct 15-26, FLETC, Glynco, GA http://www.fletc.gov/training/programs/computer-financial-investigations/technology-investigation/ Limited to Law Enforcement
BlackBag Introductory MacIntosh Forensics Oct 15-19, Tacoma, WA http://www.blackbagtech.com/products/training.htm
Paraben E-Discovery: E-mail & Mobile E-mail Devices Oct 15-19, Mississauga, Ontario, Canada http://www.paraben-training.com/
Macintosh Forensic Survival Course Oct 15-19, Philadelphia, PA http://www.phoenixdatagroup.com/cart/index.php
EnCase v6 Network Intrusion Investigations - Phase II Oct 15-18, Los Angeles, CA http://www.guidancesoftware.com/training/course_schedule.aspx
Paraben Advanced Cell Phone Forensics Oct 15-17, Mississauga, Ontario, Canada http://www.paraben-training.com/
EnCase v6 Computer Forensics I - Private Sector Oct 16-19, Washington DC http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Network Intrusion Investigations - Phase I Oct 16-19, United Kingdom http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Computer Forensics II Oct 16-19, Washington DC and Houston, TX http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Advanced Computer Forensics Oct 16-19, Chicago, IL http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase Enterprise v6 - Phase II Oct 16-19, Chicago, IL http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Network Intrusion Investigations - Phase II Oct 16-19, The Netherlands http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Advanced Internet Examinations Oct 16-19, Austin, TX http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 EnScript Programming - Phase I Oct 16-19, Toronto, Canada http://www.guidancesoftware.com/training/course_schedule.aspx
Paraben Advanced SIM Card Forensics Oct 18-19, Mississauga, Ontario, Canada http://www.paraben-training.com/
X-Ways Forensics Oct 22-24, Hong Kong http://www.x-ways.net/training/hong_kong.html
EnCase v6 Computer Forensics II Oct 23-26, Toronto, Canada http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Advanced Internet Examinations Oct 23-26, Canberra, Australia http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Computer Forensics I - Private Sector Oct 23-26, Houston, TX http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Computer Forensics I Oct 23-26, Los Angeles, CA and Singapore http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase eDiscovery with v6 Oct 23-26, Washington DC http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Computer Forensics II – Private Sector Oct 23-26, Washington DC http://www.guidancesoftware.com/training/course_schedule.aspx
File Systems Revealed Oct 25-26, Hong Kong http://www.x-ways.net/training/hong_kong.html
SARC Steganography Examiner Training Oct 26 - 27, Gaithersburg, MD (Techno Forensics Conference 2007) http://www.sarc-wv.com/training.aspx
Seized Computer Evidence Recovery Specialist (SCERS) Oct 29-Nov 9, FLETC, Glynco, GA http://www.fletc.gov/training/programs/computer-financial-investigations/technology-investigation/ Limited to Law Enforcement
Search and Seizure of Computers and Electronic Evidence Oct 29-30, Oxford, MS http://www.security.cse.msstate.edu/ftc/schedule.php Limited to Law Enforcement
EnCase v6 Computer Forensics II Oct 30-Nov 02, Los Angeles, CA and The Netherlands http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Advanced Computer Forensics Oct 30-Nov 02, Washington DC and Toronto, Ontario, Canada http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Computer Forensics I - Private Sector Oct 30-Nov 02, United Kingdom http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Network Intrusion Investigations - Phase I Oct 30-Nov 02, Chicago, IL http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase Enterprise v6 - Phase I Oct 30-Nov 02, Washington DC http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Computer Forensics II – Private Sector Oct 30-Nov 02, Houston, TX http://www.guidancesoftware.com/training/course_schedule.aspx
Paraben Handheld Forensic Course Nov 05-08, Mississauga, Ontario, Canada http://www.paraben-training.com/
SMART for Linux Nov 05-08, Austin, TX http://asrdata.com/training/training2.html
EnCase v6 Network Intrusion Investigations - Phase II Nov 05-08, Chicago, IL http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase Enterprise v6 - Phase II Nov 05-08, Washington DC http://www.guidancesoftware.com/training/course_schedule.aspx
Introduction to Cyber Crime Nov 05-07, Jackson, Mississippi http://www.security.cse.msstate.edu/ftc/schedule.php Limited to Law Enforcement
EnCase v6 Computer Forensics II – Private Sector Nov 06-09, United Kingdom http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Advanced Computer Forensics Nov 06-09, Los Angeles, CA http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 NTFS Nov 06-09, Washington DC http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Computer Forensics II Nov 06-09, Houston, TX http://www.guidancesoftware.com/training/course_schedule.aspx
AccessData BootCamp Nov 06-08, Austin, TX http://www.accessdata.com/training
AccessData Windows Forensics Nov 06-08, Solna, Sweden http://www.accessdata.com/training
Forensics Tools and Techniques Nov 07-09, Jackson, Mississippi http://www.security.cse.msstate.edu/ftc/schedule.php Limited to Law Enforcement
SMART Linux Data Forensics Nov 12-14, Austin, TX http://asrdata.com/training/training2.html
EnCase v6 Computer Forensics I - Private Sector Nov 13-16, Houston, TX http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Advanced Computer Forensics Nov 13-16, The Netherlands and United Kingdom http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Computer Forensics I Nov 13-16, Sydney, Australia and Singapore http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Advanced Internet Examinations Nov 13-16, Chicago, IL and Los Angeles, CA http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Computer Forensics II Nov 13-16, Washington DC http://www.guidancesoftware.com/training/course_schedule.aspx
AccessData BootCamp Nov 13-15, Mississippi State University http://www.security.cse.msstate.edu/ftc/schedule.php Limited to Law Enforcement
EnCase v6 Computer Forensics II Nov 20-23, Toronto, Canada http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 FIM/Mobile Use of EE Live Forensics Nov 20-23, Vancouver, BC http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 NTFS Nov 27-30, Vancouver, BC http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Network Intrusion Investigations - Phase I Nov 27-30, Sydney, Australia http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Computer Forensics II – Private Sector Nov 27-30, Houston, TX http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Computer Forensics I Nov 27-30, Washington DC http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase eDiscovery with v6 Nov 27-30, Los Angeles, CA http://www.guidancesoftware.com/training/course_schedule.aspx
Computer Network Investigation Training Program (CNITP) Dec 03-14, Glynco, GA http://www.fletc.gov/training/programs/computer-financial-investigations/technology-investigation Limited to Law Enforcement
Internet Investigations Training Program (IITP) Dec 03-07, Glynco, GA http://www.fletc.gov/training/programs/computer-financial-investigations/technology-investigation Limited to Law Enforcement
SMART for Linux Dec 03-06, Austin, TX http://asrdata.com/training/training2.html
Introduction to Cyber Crime Dec 03-05, Mississippi State University http://www.security.cse.msstate.edu/ftc/schedule.php Limited to Law Enforcement
EnCase v6 Computer Forensics I Dec 04-07, Chicago, IL; Los Angeles, CA; Houston, TX; and United Kingdom http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Network Intrusion Investigations - Phase I Dec 04-07, Washington DC http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Computer Forensics II Dec 04-07, Washington DC, Leipzig, Germany and Toronto, Ontario, Canada http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Advanced Internet Examinations Dec 04-07, Vancouver, BC http://www.guidancesoftware.com/training/course_schedule.aspx
AccessData Internet Forensics Dec 04-06 , Solna, Sweden http://www.accessdata.com/training
Forensics Tools and Techniques Dec 05-07, Mississippi State University http://www.security.cse.msstate.edu/ftc/schedule.php Limited to Law Enforcement
EnCase v6 Network Intrusion Investigations - Phase II Dec 10-13, Washington DC http://www.guidancesoftware.com/training/course_schedule.aspx
Enterprise Data Forensics Dec 10-12, Austin, TX http://asrdata.com/training/training2.html
EnCase v6 Computer Forensics II Dec 11-14, Chicago, IL; Houston, TX; Los Angeles, CA; United Kingdom; and Melbourne, Australia http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Advanced Computer Forensics Dec 11-14, Washington DC http://www.guidancesoftware.com/training/course_schedule.aspx
X-Ways Forensics Dec 17-19, Singapore http://www.x-ways.net/training/SGP.html
EnCase v6 Advanced Computer Forensics Dec 17-20, Chicago, IL and Los Angeles, CA http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 FIM/Mobile Use of EE Live Forensics Dec 17-20, Washington DC http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Advanced Internet Examinations Dec 17-20, Washington, DC and United Kingdom http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 NTFS Dec 17-20, Los Angeles, CA http://www.guidancesoftware.com/training/course_schedule.aspx
Paraben Advanced Cell Phone Forensics Dec 17-19, Mississauga, Ontario, Canada http://www.paraben-training.com/
EnCase v6 Computer Forensics II – Private Sector Dec 18-21, Houston, TX http://www.guidancesoftware.com/training/course_schedule.aspx
Paraben Advanced SIM Card Forensics Dec 20-21, Mississauga, Ontario, Canada http://www.paraben-training.com/