Difference between pages "SIM Cards" and "Upcoming events"

From ForensicsWiki
(Difference between pages)
Jump to: navigation, search
m (Added what service providers use sim cards in the US)
 
(Conferences)
 
Line 1: Line 1:
[[Image:Simpic.jpg|thumb|A typical SIM card.]]
+
<b>PLEASE READ BEFORE YOU EDIT THE LISTS BELOW</b><br>
 +
Events should be posted in the correct section, and in date order. An event should NEVER be listed in more than one section (i.e. Ongoing/Continuous events should not be listed in Scheduled Training).  When events begin the same day, events of a longer length should be listed first.  New postings of events with the same date(s) as other events should be added after events already in the list. If a provider offers the same event at several locations simultaneously, the listing should have a single (ONE) entry in the list with the date(s) and ALL locations for the event. Please use three-letter month abbreviations (i.e. Sep, NOT Sept. or September), use two digit dates (i.e. Jan 01 NOT Jan 1), and use date ranges rather than listing every date during an event(i.e. Jan 02-05, NOT Jan 02, 03, 04, 05).<br>
 +
<i>Some conferences or training opportunities may be <u>limited</u> to <b>Law Enforcement Only</b> or to a specific audience.  Such restrictions should be noted when known.</i>
  
== SIM-Subscriber Identity Module ==
+
This is a BY DATE listing of upcoming conferences and training events relevant to [[digital forensics]].  It is not an all inclusive list, but includes most well-known activities.  Some events may duplicate events on the generic [[conferences]] page, but entries in this list have specific dates and locations for the upcoming event.
  
The UICC (Universal Integrated Circuit Card) is a smart card which contains account information and memory that is used to enable GSM cellular telephonesOne of the applications running on the smart card is the SIM, or Subscriber Identity Module. In common parlance the term "UICC" is not used an the phrase "SIM" is used to describe the smart card itself.
+
This listing is divided into four sections (described as follows):<br>
 +
<ol><li><b><u>Calls For Papers</u></b> - Calls for papers for either Journals or for Conferences, relevant to Digital Forensics (Name, Closing Date, URL)</li><br>
 +
<li><b><u>Conferences</u></b> - Conferences relevant for Digital Forensics (Name, Date, Location, URL)</li><br>
 +
<li><b><u>On-Going / Continuous Training</u></b> - Training opportunities that are either always available online/distance learning format or that are offered the same time every month (Name, date-if applicable, URL)</li><br>
 +
<li><b><u>Scheduled Training Courses</u></b> - Training Classes/Courses that are scheduled for specific dates/locationsThis would include online (or distance learning format) courses which begin on specific dates, instead of the "start anytime" courses listed in the previous section. (Name, Date(s), Location(s), URL)<br></li></ol>
  
Because the SIM is just one of several applications running on the smart card, a given card could, in theory, contain multiple SIMs. This would allow multiple phone numbers or accounts to be accessed by a single UICC. This is seldom seen, though there is at least one "12-in-1" SIM card being advertised at present.
+
The Conference and Training List is provided by the American Academy of Forensic Sciences (AAFS) Digital and Multi-media Listserv.
 +
<i> (Subscribe by sending an email to listserv@lists.mitre.org with message body containing SUBSCRIBE AAFS-DIGITAL-MULTIMEDIA-LIST)</i>
 +
Requests for additions, deletions or corrections to this list may be sent by email to David Baker <i>(bakerd AT mitre.org)</i>.
  
Early versions of the UICC used full-size smart cards (85mm x 54mm x 0.76mm). The card has since been shrunk to the standard size of 25mm x 15mm x 0.76mm.
+
== Calls For Papers ==
 +
{| border="0" cellpadding="2" cellspacing="2" align="top"
 +
|- style="background:#bfbfbf; font-weight: bold"
 +
! Title
 +
! Due Date
 +
! Website
 +
|-
 +
|IFIP WG 11.9 International Conference on Digital Forensics
 +
|Sep 15, 2007
 +
|http://www.ifip119-kyoto.org/doku.php?id=cfp
 +
|-
 +
|2nd Small Scale Digital Device Forensics Journal
 +
|Oct 31, 2007
 +
|http://ssddfj.org/submit.asp
 +
|-
 +
|International Association of Forensic Science Annual Meeting
 +
|Jan 01, 2008
 +
|http://www.iafs2008.com/abstracts/intro.asp
 +
|-
 +
|Usenix Annual Technical Conference
 +
|Jan 07, 2008 (11:59PM PST)
 +
|http://www.usenix.com/events/usenix08/cfp/
 +
|-
 +
|Techno-Security 2008
 +
|May 04, 2008
 +
|http://www.techsec.com/html/TechnoPapers.html
 +
|-
 +
|}
  
 +
== Conferences ==
 +
{| border="0" cellpadding="2" cellspacing="2" align="top"
 +
|- style="background:#bfbfbf; font-weight: bold"
 +
! Title
 +
! Date/Location
 +
! Website
 +
|-
 +
|14th International Conference on Image Analysis and Processing (ICIAP 2007)
 +
|Sep 10-14, Modena, Italy
 +
|http://www.iciap2007.org
 +
|-
 +
|3rd International Conference on IT-Incident Management & IT-Forensics
 +
|Sep 11-12, Stuttgart, Germany
 +
|http://www.imf-conference.org/
 +
|-
 +
|ForenSec Canada 2007
 +
|Sep 17-18, Regina, Saskatchewan, Canada
 +
|http://www.csiservices.ca/events.html#ForenSec
 +
|-
 +
|SANS Network Security
 +
|Sep 22-30, Las Vegas, NV
 +
|http://www.sans.org/ns2007/?portal=69456f95660ade45be29c00b0c14aea1
 +
|-
 +
|Black and White Ball
 +
|Sep 25-28, London, UK
 +
|http://www.theblackandwhiteball.co.uk/
 +
|-
 +
|Wisconsin Association of Computer Crimes Investigators/Forensic Association of Computer Technologists
 +
|Sep 26-28, Milwaukee, WI
 +
|http://www.byteoutofcrime.org
 +
|-
 +
|6th Annual Internet Crimes Against Children National Conference
 +
|Oct 15-18, San Jose, CA
 +
|http://www.icactraining.org/website/registration.html
 +
|-
 +
|ToorCon 9
 +
|Oct 19-21, San Diego, CA
 +
|http://toorcon.org/intro.php
 +
|-
 +
|BlackHat Japan - Briefings
 +
|Oct 23-26, Tokyo, Japan
 +
|http://www.blackhat.com/html/bh-japan-07/bh-jp-07-main.html
 +
|-
 +
|Global Conference on Economic and High-Tech Crime (NW3C Membership Required)
 +
|Oct 24-26, Crystal City, VA
 +
|https://conference.nw3c.org/index.cfm
 +
|-
 +
|European Network Forensic and Security Conference 2007
 +
|Oct 24-26,  Zuyd University, Heerlen, Netherlands
 +
|http://www.enfsc2007.com/
 +
|-
 +
|Techno-Forensics Conference
 +
|Oct 29 - 31, Rockville, MD
 +
|http://www.techsec.com/html/TechnoForensics2007.html
 +
|-
 +
|Computer Security Institute Annual Meeting
 +
|Nov 3-9, Arlington, VA
 +
|http://www.csiannual.com/
 +
|-
 +
|First Forensic Forum Conference (F3 Conference)
 +
|Nov 3-5, Tortworth, England
 +
|http://www.f3.org.uk/
 +
|-
 +
|DeepSec IDSC
 +
|Nov 22-24, Vienna, Austria
 +
|http://deepsec.net/
 +
|-
 +
|Digital Forensic Forum Prague 2007
 +
|Nov 26-27, Prague, Czech Republic
 +
|http://www.dff-prague.com/
 +
|-
 +
|PacSec Applied Security Conference
 +
|Nov 29-30, Tokyo, Japan
 +
|http://www.pacsec.jp/index.html
 +
|-
 +
|SANS Security 2008
 +
|Jan 11-19, New Orleans, LA
 +
|http://www.sans.org/security08/
 +
|-
 +
|DoD Cyber Crime Conference 2008
 +
|Jan 13-18, St. Louis, MO
 +
|http://www.dodcybercrime.com/
 +
|-
 +
|4th Annual IFIP WG 11.9 International Conference on Digital Forensics
 +
|Jan 27-30, Kyoto, Japan
 +
|http://www.ifip119-kyoto.org/doku.php
 +
|-
 +
|AAFS Annual Meeting 2008
 +
|Feb 18-23, Washington, DC
 +
|http://aafs.org/default.asp?section_id=meetings&page_id=aafs_annual_meeting
 +
|-
 +
|CanSecWest Security Conference 2008
 +
|Mar 19-21, Vanouver, BC, Canada
 +
|http://cansecwest.com/
 +
|-
 +
|EuSecWest Security Conference 2008
 +
|May 21-22, London, England
 +
|http://eusecwest.com/
 +
|-
 +
|Techno-Security 2008
 +
|Jun 01-04, Myrtle Beach, SC
 +
|http://www.techsec.com/html/Techno2008.html
 +
|-
 +
|Usenix Annual Technical Conference
 +
|Jun 22-27, Boston, MA
 +
|http://www.usenix.com/events/usenix08/
 +
|-
 +
|International Association of Forensic Sciences Annual Meeting
 +
|Jul 21-26, New Orleans, LA
 +
|http://www.iafs2008.com/
 +
|-
 +
|Digital Forensic Research Workshop
 +
|Aug 11-13, Baltimore, MD
 +
|http://www.dfrws.org
 +
|-
 +
|}
  
Although UICC cards traditionally held just 16 to 64KB of memory, the recent trend has been to produce SIM cards with larger storage capacities, ranging from 512MB up to [http://www.m-systems.com/site/en-US/ M-Systems'] 1GB SIM Card slated for release in late 2006.
+
== On-going / Continuous Training ==
 +
{| border="0" cellpadding="2" cellspacing="2" align="top"
 +
|- style="background:#bfbfbf; font-weight: bold"
 +
! Title
 +
! Date/Location or Venue
 +
! Website
 +
|-
 +
|Basic Computer Examiner Course - Computer Forensic Training Online
 +
|Distance Learning Format
 +
|http://www.cftco.com
 +
|-
 +
|Linux Data Forensics Training
 +
|Distance Learning Format
 +
|http://www.crazytrain.com/training.html
 +
|-
 +
|SANS On-Demand Training
 +
|Distance Learning Format
 +
|http://www.sans.org/ondemand/?portal=69456f95660ade45be29c00b0c14aea1
 +
|-
 +
|MaresWare Suite Training
 +
|First full week every month, Atlanta, GA
 +
|http://www.maresware.com/maresware/training/maresware.htm
 +
|-
 +
|Evidence Recovery for Windows Vista&trade;
 +
|First full week every month, Brunswick, GA
 +
|http://www.internetcrimes.net
 +
|-
 +
|Evidence Recovery for Windows Server&reg; 2003 R2
 +
|Second full week every month, Brunswick, GA
 +
|http://www.internetcrimes.net
 +
|-
 +
|Evidence Recovery for the Windows XP&trade; operating system
 +
|Third full week every month, Brunswick, GA
 +
|http://www.internetcrimes.net
 +
|-
 +
|Computer Forensics Training and CCE&trade; Testing for Litigation Support Professionals
 +
|Third weekend of every month (Fri-Mon), Dallas, TX
 +
|http://www.md5group.com
 +
|-
 +
|}
  
== SIM Security ==
+
== Scheduled Training Courses ==
 
+
{| border="0" cellpadding="2" cellspacing="2" align="top"
Information inside the UICC can be protected with a PIN and a PUK.
+
|- style="background:#bfbfbf; font-weight: bold"
 
+
! Title
The PIN (Personal Identification Number) is a code that locks access to the SIM. Not all SIMs have PINs; if a SIM has a PIN, the PIN must be entered to unlock the SIM.  
+
! Date/Location
PUK (Personal Unlocking Code) codes are provided by the network provider to unlock a code. If the PUK is incorrectly put in 10 times the SIM card will be permanently locked.
+
! Website
 
+
! Limitation
== SIM Forensics ==
+
|-
 
+
|SMART for Linux
The data that a SIM card can provide the forensics examiner can be invaluable to an investigation. Acquiring a SIM card allows a large amount of information that the suspect has dealt with over the phone to be investigated.
+
|Sep 03-06, Austin, TX
 
+
|http://asrdata.com/training/training2.html
In general, some of this data can help an investigator determine:
+
|-
* Phone numbers of calls made/received
+
|Paraben Handheld Forensic Course
* Contacts
+
|Sep 04-07, Mississauga, Ontario, Canada
* [[SMS]] details (time/date, recipient, etc.)
+
|http://www.paraben-training.com/
* SMS text (the message itself)
+
|-
* Picture (if there is a camera)
+
|EnCase v6 Computer Forensics II – Private Sector
 
+
|Sep 04-07, Houston, TX
There are many software solutions that can help the examiner to acquire the information from the SIM card. Several products include 3GForensics SIMIS [http://www.3gforensics.co.uk/products.htm], Inside Out's [http://simcon.no/ SIMCon], or SIM Content Controller, and Paraben Forensics' [http://www.paraben-forensics.com/catalog/product_info.php?products_id=289 SIM Card Seizure].
+
|http://www.guidancesoftware.com/training/course_schedule.aspx
 
+
|-
The SIM file system is hierarchical in nature consisting of 3 parts:
+
|EnCase v6 Computer Forensics I
*Master File (MF) - root of the file system that contains
+
|Sep 04-07, Melbourne, Australia and United Kingdom
DF’s and EF’s
+
|http://www.guidancesoftware.com/training/course_schedule.aspx
*Dedicated File (DF)
+
|-
*Elementary Files (EF)
+
|EnCase v6 FIM/Mobile Use of EE Live Forensics
 
+
|Sep 04-07, The Netherlands
 
+
|http://www.guidancesoftware.com/training/course_schedule.aspx
=== Data Acquisition ===
+
|-
 
+
|EnCase v6 Computer Forensics II
These software titles can extract such technical data from the SIM card as:
+
|Sep 04-07, Austin, TX
 
+
|http://www.guidancesoftware.com/training/course_schedule.aspx
* '''International Mobile Subscriber Identity (IMSI)''': A unique identifying number that identifies the phone/subscription to the [[GSM]] network
+
|-
* '''Mobile Country Code (MCC)''': A three-digit code that represents the SIM card's country of origin
+
|AccessData BootCamp
* '''Mobile Network Code (MNC)''': A two-digit code that represents the SIM card's home network
+
|Sep 04-06, Mississippi State University
* '''Mobile Subscriber Identification Number (MSIN)''': A unique ten-digit identifying number that identifies the specific subscriber to the GSM network
+
|http://www.security.cse.msstate.edu/ftc/schedule.php
* '''Mobile Subscriber International ISDN Number (MSISDN)''': A number that identifies the phone number used by the headset
+
|Limited to Law Enforcement
* '''Abbreviated Dialing Numbers (ADN)''': Telephone numbers stored in sims memory
+
|-
* '''Last Dialed Numbers (LDN)'''
+
|Computer Forensics Training and CCE&trade; Testing for Litigation Support Professionals
* '''Short Message Service (SMS)''': Text Messages
+
|Sep 07-10, New York City, NY
* '''Public Land Mobile Network (PLMN) selector'''
+
|http://www.md5group.com
* '''Forbidden PLMNs'''
+
|-
* '''Location Information (LOCI)'''
+
|Paraben E-Discovery: E-mail & Mobile E-mail Devices
* '''General Packet Radio Service (GPRS) location'''
+
|Sep 10-14, Potomac Falls, VA
* '''Integrated Circuit Card Identifier (ICCID)'''
+
|http://www.paraben-training.com/
* '''Service Provider Name (SPN)'''
+
|-
* '''Phase Identification'''
+
|Paraben Advanced Cell Phone Forensics
* '''SIM Service Table (SST)'''
+
|Sep 10-12, San Diego, CA
* '''Language Preference (LP)'''
+
|http://www.paraben-training.com/
* '''Card Holder Verification (CHV1) and (CHV2)'''
+
|-
* '''Broadcast Control Channels (BCCH)'''
+
|EnCase v6 Computer Forensics II
* '''Ciphering Key (Kc)'''
+
|Sep 11-14, United Kingdom and Singapore
* '''Ciphering Key Sequence Number'''
+
|http://www.guidancesoftware.com/training/course_schedule.aspx
* '''Emergency Call Code'''
+
|-
* '''Fixed Dialing Numbers (FDN)'''
+
|EnCase v6 Computer Forensics I
* '''Forbidden PLMNs'''
+
|Sep 11-14, Houston, TX and Washington, DC
* '''Local Area Identitity (LAI)'''
+
|http://www.guidancesoftware.com/training/course_schedule.aspx
* '''Own Dialing Number'''
+
|-
* '''Temporary Mobile Subscriber Identity (TMSI)'''
+
|EnCase Enterprise v6 - Phase I
* '''Routing Area Identifier (RIA) netowrk code'''
+
|Sep 11-14, Chicago, IL
* '''Service Dialing Numbers (SDNs)'''
+
|http://www.guidancesoftware.com/training/course_schedule.aspx
* '''Service Provider Name'''
+
|-
* '''Depersonalizatoin Keys'''
+
|EnCase v6 Computer Forensics I - Private Sector
 
+
|Sep 11-14, Los Angeles, CA
This information can be used to contact the service provider to obtain even more information than is stored on the SIM card.
+
|http://www.guidancesoftware.com/training/course_schedule.aspx
 
+
|-
== USIM-Universal Subscriber Identity Module ==
+
|First Responder to Digital Evidence Program (FRDE)
 
+
|Sep 11-13, FLETC, Glynco, GA
A Universal Subscriber Identity Module is an application for UMTS mobile telephony running on a UICC smart card which is inserted in a 3G mobile phone. There is a common misconception to call the UICC card itself a USIM, but the USIM is merely a logical entity on the physical card.
+
|http://www.fletc.gov/training/programs/computer-financial-investigations/technology-investigation/
 
+
|Limited to Law Enforcement
It stores user subscriber information, authentication information and provides storage space for text messages and phone book contacts. The phone book on a UICC has been greatly enhanced.
+
|-
 
+
|AccessData Applied Decryption
For authentication purposes, the USIM stores a long-term preshared secret key K, which is shared with the Authentication Center (AuC) in the network. The USIM also verifies a sequence number that must be within a range using a window mechanism to avoid replay attacks, and is in charge of generating the session keys CK and IK to be used in the confidentiality and integrity algorithms of the KASUMI block cipher in Universal Mobile Telecommunications System (UMTS).
+
|Sep 11-13, Dallas, TX
 
+
|http://www.accessdata.com/training
In Mobile Financial Services, USIM seems to be a mandetory Security Element for user authentication, authorization and stored credentials. With the integration of NFC Handset and USIM, users will be able to make proximity payments where the NFS handset enables contactless payment and USIM enables independent security element.
+
|-
This is the evolution of the SIM for 3G devices. It can allow for multiple phone numbers to be assigned to the USIM, thus giving more than one phone number to a device.
+
|Paraben Advanced SIM Card Forensics
 
+
|Sep 13-14, San Diego, CA
== Service Provider Data ==
+
|http://www.paraben-training.com/
 
+
|-
Some additional information the service provider might store:
+
|Paraben Network Incident Response
 
+
|Sep 17-21, Potomac Falls, VA
* A customer database
+
|http://www.paraben-training.com/
* [[Call Detail Record]]s (CDR)
+
|-
* [[Home Location Register]] (HLR)
+
|Enterprise Data Forensics
 
+
|Sep 17-19, Austin, TX
 
+
|http://asrdata.com/training/training2.html
== Service Providers that use SIM Cards in the United States ==
+
|-
* T-Mobile
+
|EnCase v6 Computer Forensics II – Private Sector
* Cingular/AT&T
+
|Sep 18-21, Los Angeles, CA
 
+
|http://www.guidancesoftware.com/training/course_schedule.aspx
== Sim Card Text Encoding ==
+
|-
 
+
|EnCase v6 Computer Forensics II
Originally the middle-European [[GSM]] network used only a 7-bit code derived from the basic [[ASCII]] code. However as GSM spread worldwide it was concluded that more characters, such as the major characters of all living languages, should be able to be represented on GSM phones. Thus, there was a movement towards a 16-bit code known as [[UCS-2]] which is now the standard in GSM text encoding. This change in encoding can make it more difficult to accurately obtain data form [[SIM cards]] of the older generation which use the 7-bit encoding. This encoding is used to compress the hexadecimal size of certain elements of the SIMs data, particularly in [[SMS]] and [[Abbreviated Dialing Numbers]].
+
|Sep 18-21, Houston, TX and Leipzig, Germany
 
+
|http://www.guidancesoftware.com/training/course_schedule.aspx
== References ==
+
|-
 
+
|EnCase v6 Advanced Computer Forensics
* [http://www.simcon.no/ SIMCon]
+
|Sep 18-21, Sydney, Australia and United Kingdom
* [http://www.sectorforensics.co.uk/sim-examination.shtml Sector Forensics]
+
|http://www.guidancesoftware.com/training/course_schedule.aspx
* [http://www.utica.edu/academic/institutes/ecii/ijde/articles.cfm?action=issue&id=5  IJDE Spring 2003 Volume 2, Issue 1 ]: [http://www.utica.edu/academic/institutes/ecii/publications/articles/A0658858-BFF6-C537-7CF86A78D6DE746D.pdf Forensics and the GSM Mobile Telephone System] (PDF)
+
|-
* http://en.wikipedia.org/wiki/Subscriber_Identity_Module
+
|EnCase v6 Computer Forensics I
 +
|Sep 18-21, Toronto, Canada
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|Paraben Cellular/GPS Signal Analysis
 +
|Sep 20-21, San Diego, CA
 +
|http://www.paraben-training.com/
 +
|-
 +
|Internet Investigations Training Program (IITP)
 +
|Sep 24-28, Glynco, GA
 +
|http://www.fletc.gov/training/programs/computer-financial-investigations/technology-investigation
 +
|Limited to Law Enforcement
 +
|-
 +
|Macintosh Forensic Survival Course
 +
|Sep 24-28, Santa Ana, CA
 +
|http://www.phoenixdatagroup.com/cart/index.php
 +
|-
 +
|BlackBag Introductory MacIntosh Forensics
 +
|Sep 24-28, Richmond, VA
 +
|http://www.blackbagtech.com/products/training.htm
 +
|Limited to Law Enforcement
 +
|-
 +
|Paraben Advanced Cell Phone Forensics
 +
|Sep 24-26, Potomac Falls, VA
 +
|http://www.paraben-training.com/
 +
|-
 +
|Introduction to Cyber Crime
 +
|Sep 24-26, Jackson, Mississippi
 +
|http://www.security.cse.msstate.edu/ftc/schedule.php
 +
|Limited to Law Enforcement
 +
|-
 +
|EnCase v6 FIM/Mobile Use of EE Live Forensics
 +
|Sep 25-28, United Kingdom
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Computer Forensics I - Private Sector
 +
|Sep 25-28, Houston, TX
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Advanced Computer Forensics
 +
|Sep 25-28, Los Angeles, CA
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Computer Forensics II
 +
|Sep 25-28, Toronto, Ontario, Canada
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|AccessData Applied Decryption
 +
|Sep 25-27, Chicago, IL
 +
|http://www.accessdata.com/training
 +
|-
 +
|AccessData BootCamp
 +
|Sep 25-27, Solna, SE
 +
|http://www.accessdata.com/training
 +
|-
 +
|Forensics Tools and Techniques
 +
|Sep 26-28, Jackson, Mississippi
 +
|http://www.security.cse.msstate.edu/ftc/schedule.php
 +
|Limited to Law Enforcement
 +
|-
 +
|Paraben Advanced SIM Card Forensics
 +
|Sep 27-28, Potomac Falls, VA
 +
|http://www.paraben-training.com/
 +
|-
 +
|SMART for Linux
 +
|Oct 01-04, Austin, TX
 +
|http://asrdata.com/training/training2.html
 +
|-
 +
|Paraben Wireless Forensics
 +
|Oct 01-03, San Diego, CA
 +
|http://www.paraben-training.com/
 +
|-
 +
|EnCase v6 Computer Forensics I - Private Sector
 +
|Oct 02-05, Chicago, IL
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 FIM/Mobile Use of EE Live Forensics
 +
|Oct 02-05, Los Angeles, CA, Washington, DC and Perth, Australia
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Computer Forensics II – Private Sector
 +
|Oct 02-05, Houston, TX
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Computer Forensics I
 +
|Oct 02-05, The Netherlands
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 EnScript Programming - Phase II
 +
|Oct 02-05, Washington DC
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Advanced Internet Examinations
 +
|Oct 02-05, Toronto, Canada
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|Paraben Cellular/GPS Signal Analysis
 +
|Oct 04-05, Potomac Falls, VA
 +
|http://www.paraben-training.com/
 +
|-
 +
|Computer Forensics Training and CCE&trade; Testing for Litigation Support Professionals
 +
|Oct 05-08, Denver, CO
 +
|http://www.md5group.com
 +
|-
 +
|Paraben Handheld Forensic Course
 +
|Oct 08-11, San Diego, CA and Potomac Falls, VA
 +
|http://www.paraben-training.com/
 +
|-
 +
|SMART Windows Data Forensics
 +
|Oct 08-10, Austin, TX
 +
|http://asrdata.com/training/training2.html
 +
|-
 +
|EnCase v6 Network Intrusion Investigations - Phase I
 +
|Oct 09-12, Los Angeles, CA and The Netherlands
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 FIM/Mobile Use of EE Live Forensics
 +
|Oct 09-12, Sydney, Australia
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Computer Forensics I
 +
|Oct 09-12, Houston, TX
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Advanced Internet Examinations
 +
|Oct 09-12, Washington, DC and United Kingdom
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Advanced Computer Forensics
 +
|Oct 09-12, Washington DC
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Computer Forensics II – Private Sector
 +
|Oct 09-12, Chicago, IL
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|Computer Forensics Training and CCE&trade; Testing for Litigation Support Professionals
 +
|Oct 12-15, Dallas, TX
 +
|http://www.md5group.com
 +
|-
 +
|Digital Evidence Acquisition Specialist Training Program (DEASTP)
 +
|Oct 15-26, FLETC, Glynco, GA
 +
|http://www.fletc.gov/training/programs/computer-financial-investigations/technology-investigation/
 +
|Limited to Law Enforcement
 +
|-
 +
|BlackBag Introductory MacIntosh Forensics
 +
|Oct 15-19, Tacoma, WA
 +
|http://www.blackbagtech.com/products/training.htm
 +
|-
 +
|Paraben E-Discovery: E-mail & Mobile E-mail Devices
 +
|Oct 15-19, Mississauga, Ontario, Canada
 +
|http://www.paraben-training.com/
 +
|-
 +
|Macintosh Forensic Survival Course
 +
|Oct 15-19, Philadelphia, PA
 +
|http://www.phoenixdatagroup.com/cart/index.php
 +
|-
 +
|EnCase v6 Network Intrusion Investigations - Phase II
 +
|Oct 15-18, Los Angeles, CA
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|Paraben Advanced Cell Phone Forensics
 +
|Oct 15-17, Mississauga, Ontario, Canada
 +
|http://www.paraben-training.com/
 +
|-
 +
|EnCase v6 Computer Forensics I - Private Sector
 +
|Oct 16-19, Washington DC
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Network Intrusion Investigations - Phase I
 +
|Oct 16-19, United Kingdom
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Computer Forensics II
 +
|Oct 16-19, Washington DC and Houston, TX
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Advanced Computer Forensics
 +
|Oct 16-19, Chicago, IL
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase Enterprise v6 - Phase II
 +
|Oct 16-19, Chicago, IL
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Network Intrusion Investigations - Phase II
 +
|Oct 16-19, The Netherlands
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Advanced Internet Examinations
 +
|Oct 16-19, Austin, TX
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 EnScript Programming - Phase I
 +
|Oct 16-19, Toronto, Canada
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|Paraben Advanced SIM Card Forensics
 +
|Oct 18-19, Mississauga, Ontario, Canada
 +
|http://www.paraben-training.com/
 +
|-
 +
|X-Ways Forensics
 +
|Oct 22-24, Hong Kong
 +
|http://www.x-ways.net/training/hong_kong.html
 +
|-
 +
|EnCase v6 Computer Forensics II
 +
|Oct 23-26, Toronto, Canada
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Advanced Internet Examinations
 +
|Oct 23-26, Canberra, Australia
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Computer Forensics I - Private Sector
 +
|Oct 23-26, Houston, TX
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Computer Forensics I
 +
|Oct 23-26, Los Angeles, CA and Singapore
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase eDiscovery with v6
 +
|Oct 23-26, Washington DC
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Computer Forensics II – Private Sector
 +
|Oct 23-26, Washington DC
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|File Systems Revealed
 +
|Oct 25-26, Hong Kong
 +
|http://www.x-ways.net/training/hong_kong.html
 +
|-
 +
|SARC Steganography Examiner Training
 +
|Oct 26 - 27, Gaithersburg, MD (Techno Forensics Conference 2007)
 +
|http://www.sarc-wv.com/training.aspx
 +
|-
 +
|Seized Computer Evidence Recovery Specialist (SCERS)
 +
|Oct 29-Nov 9, FLETC, Glynco, GA
 +
|http://www.fletc.gov/training/programs/computer-financial-investigations/technology-investigation/
 +
|Limited to Law Enforcement
 +
|-
 +
|Search and Seizure of Computers and Electronic Evidence
 +
|Oct 29-30, Oxford, MS
 +
|http://www.security.cse.msstate.edu/ftc/schedule.php
 +
|Limited to Law Enforcement
 +
|-
 +
|EnCase v6 Computer Forensics II
 +
|Oct 30-Nov 02, Los Angeles, CA and The Netherlands
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Advanced Computer Forensics
 +
|Oct 30-Nov 02, Washington DC and Toronto, Ontario, Canada
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Computer Forensics I - Private Sector
 +
|Oct 30-Nov 02, United Kingdom
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Network Intrusion Investigations - Phase I
 +
|Oct 30-Nov 02, Chicago, IL
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase Enterprise v6 - Phase I
 +
|Oct 30-Nov 02, Washington DC
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Computer Forensics II – Private Sector
 +
|Oct 30-Nov 02, Houston, TX
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|Paraben Handheld Forensic Course
 +
|Nov 05-08, Mississauga, Ontario, Canada
 +
|http://www.paraben-training.com/
 +
|-
 +
|SMART for Linux
 +
|Nov 05-08, Austin, TX
 +
|http://asrdata.com/training/training2.html
 +
|-
 +
|EnCase v6 Network Intrusion Investigations - Phase II
 +
|Nov 05-08, Chicago, IL
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase Enterprise v6 - Phase II
 +
|Nov 05-08, Washington DC
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|Introduction to Cyber Crime
 +
|Nov 05-07, Jackson, Mississippi
 +
|http://www.security.cse.msstate.edu/ftc/schedule.php
 +
|Limited to Law Enforcement
 +
|-
 +
|EnCase v6 Computer Forensics II – Private Sector
 +
|Nov 06-09, United Kingdom
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Advanced Computer Forensics
 +
|Nov 06-09, Los Angeles, CA
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 NTFS
 +
|Nov 06-09, Washington DC
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Computer Forensics II
 +
|Nov 06-09, Houston, TX
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|AccessData BootCamp
 +
|Nov 06-08, Austin, TX
 +
|http://www.accessdata.com/training
 +
|-
 +
|AccessData Windows Forensics
 +
|Nov 06-08, Solna, Sweden
 +
|http://www.accessdata.com/training
 +
|-
 +
|Forensics Tools and Techniques
 +
|Nov 07-09, Jackson, Mississippi
 +
|http://www.security.cse.msstate.edu/ftc/schedule.php
 +
|Limited to Law Enforcement
 +
|-
 +
|SMART Linux Data Forensics
 +
|Nov 12-14, Austin, TX
 +
|http://asrdata.com/training/training2.html
 +
|-
 +
|EnCase v6 Computer Forensics I - Private Sector
 +
|Nov 13-16, Houston, TX
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Advanced Computer Forensics
 +
|Nov 13-16, The Netherlands and United Kingdom
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Computer Forensics I
 +
|Nov 13-16, Sydney, Australia and Singapore
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Advanced Internet Examinations
 +
|Nov 13-16, Chicago, IL and Los Angeles, CA
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Computer Forensics II
 +
|Nov 13-16, Washington DC
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|AccessData BootCamp
 +
|Nov 13-15, Mississippi State University
 +
|http://www.security.cse.msstate.edu/ftc/schedule.php
 +
|Limited to Law Enforcement
 +
|-
 +
|EnCase v6 Computer Forensics II
 +
|Nov 20-23, Toronto, Canada
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 FIM/Mobile Use of EE Live Forensics
 +
|Nov 20-23, Vancouver, BC
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 NTFS
 +
|Nov 27-30, Vancouver, BC
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Network Intrusion Investigations - Phase I
 +
|Nov 27-30, Sydney, Australia
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Computer Forensics II – Private Sector
 +
|Nov 27-30, Houston, TX
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Computer Forensics I
 +
|Nov 27-30, Washington DC
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase eDiscovery with v6
 +
|Nov 27-30, Los Angeles, CA
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|Computer Network Investigation Training Program (CNITP)
 +
|Dec 03-14, Glynco, GA
 +
|http://www.fletc.gov/training/programs/computer-financial-investigations/technology-investigation
 +
|Limited to Law Enforcement
 +
|-
 +
|Internet Investigations Training Program (IITP)
 +
|Dec 03-07, Glynco, GA
 +
|http://www.fletc.gov/training/programs/computer-financial-investigations/technology-investigation
 +
|Limited to Law Enforcement
 +
|-
 +
|SMART for Linux
 +
|Dec 03-06, Austin, TX
 +
|http://asrdata.com/training/training2.html
 +
|-
 +
|Introduction to Cyber Crime
 +
|Dec 03-05, Mississippi State University
 +
|http://www.security.cse.msstate.edu/ftc/schedule.php
 +
|Limited to Law Enforcement
 +
|-
 +
|EnCase v6 Computer Forensics I
 +
|Dec 04-07, Chicago, IL; Los Angeles, CA; Houston, TX; and United Kingdom
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Network Intrusion Investigations - Phase I
 +
|Dec 04-07, Washington DC
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Computer Forensics II
 +
|Dec 04-07, Washington DC, Leipzig, Germany and Toronto, Ontario, Canada
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Advanced Internet Examinations
 +
|Dec 04-07, Vancouver, BC
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|AccessData Internet Forensics
 +
|Dec 04-06 , Solna, Sweden
 +
|http://www.accessdata.com/training
 +
|-
 +
|Forensics Tools and Techniques
 +
|Dec 05-07, Mississippi State University
 +
|http://www.security.cse.msstate.edu/ftc/schedule.php
 +
|Limited to Law Enforcement
 +
|-
 +
|EnCase v6 Network Intrusion Investigations - Phase II
 +
|Dec 10-13, Washington DC
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|Enterprise Data Forensics
 +
|Dec 10-12, Austin, TX
 +
|http://asrdata.com/training/training2.html
 +
|-
 +
|EnCase v6 Computer Forensics II
 +
|Dec 11-14, Chicago, IL; Houston, TX; Los Angeles, CA; United Kingdom; and Melbourne, Australia
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Advanced Computer Forensics
 +
|Dec 11-14, Washington DC
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|X-Ways Forensics
 +
|Dec 17-19, Singapore
 +
|http://www.x-ways.net/training/SGP.html
 +
|-
 +
|EnCase v6 Advanced Computer Forensics
 +
|Dec 17-20, Chicago, IL and Los Angeles, CA
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 FIM/Mobile Use of EE Live Forensics
 +
|Dec 17-20, Washington DC
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 Advanced Internet Examinations
 +
|Dec 17-20, Washington, DC and United Kingdom
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|EnCase v6 NTFS
 +
|Dec 17-20, Los Angeles, CA
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|Paraben Advanced Cell Phone Forensics
 +
|Dec 17-19, Mississauga, Ontario, Canada
 +
|http://www.paraben-training.com/
 +
|-
 +
|EnCase v6 Computer Forensics II – Private Sector
 +
|Dec 18-21, Houston, TX
 +
|http://www.guidancesoftware.com/training/course_schedule.aspx
 +
|-
 +
|Paraben Advanced SIM Card Forensics
 +
|Dec 20-21, Mississauga, Ontario, Canada
 +
|http://www.paraben-training.com/
 +
|-
 +
|}

Revision as of 12:07, 10 September 2007

PLEASE READ BEFORE YOU EDIT THE LISTS BELOW
Events should be posted in the correct section, and in date order. An event should NEVER be listed in more than one section (i.e. Ongoing/Continuous events should not be listed in Scheduled Training). When events begin the same day, events of a longer length should be listed first. New postings of events with the same date(s) as other events should be added after events already in the list. If a provider offers the same event at several locations simultaneously, the listing should have a single (ONE) entry in the list with the date(s) and ALL locations for the event. Please use three-letter month abbreviations (i.e. Sep, NOT Sept. or September), use two digit dates (i.e. Jan 01 NOT Jan 1), and use date ranges rather than listing every date during an event(i.e. Jan 02-05, NOT Jan 02, 03, 04, 05).
Some conferences or training opportunities may be limited to Law Enforcement Only or to a specific audience. Such restrictions should be noted when known.

This is a BY DATE listing of upcoming conferences and training events relevant to digital forensics. It is not an all inclusive list, but includes most well-known activities. Some events may duplicate events on the generic conferences page, but entries in this list have specific dates and locations for the upcoming event.

This listing is divided into four sections (described as follows):

  1. Calls For Papers - Calls for papers for either Journals or for Conferences, relevant to Digital Forensics (Name, Closing Date, URL)

  2. Conferences - Conferences relevant for Digital Forensics (Name, Date, Location, URL)

  3. On-Going / Continuous Training - Training opportunities that are either always available online/distance learning format or that are offered the same time every month (Name, date-if applicable, URL)

  4. Scheduled Training Courses - Training Classes/Courses that are scheduled for specific dates/locations. This would include online (or distance learning format) courses which begin on specific dates, instead of the "start anytime" courses listed in the previous section. (Name, Date(s), Location(s), URL)

The Conference and Training List is provided by the American Academy of Forensic Sciences (AAFS) Digital and Multi-media Listserv. (Subscribe by sending an email to listserv@lists.mitre.org with message body containing SUBSCRIBE AAFS-DIGITAL-MULTIMEDIA-LIST) Requests for additions, deletions or corrections to this list may be sent by email to David Baker (bakerd AT mitre.org).

Calls For Papers

Title Due Date Website
IFIP WG 11.9 International Conference on Digital Forensics Sep 15, 2007 http://www.ifip119-kyoto.org/doku.php?id=cfp
2nd Small Scale Digital Device Forensics Journal Oct 31, 2007 http://ssddfj.org/submit.asp
International Association of Forensic Science Annual Meeting Jan 01, 2008 http://www.iafs2008.com/abstracts/intro.asp
Usenix Annual Technical Conference Jan 07, 2008 (11:59PM PST) http://www.usenix.com/events/usenix08/cfp/
Techno-Security 2008 May 04, 2008 http://www.techsec.com/html/TechnoPapers.html

Conferences

Title Date/Location Website
14th International Conference on Image Analysis and Processing (ICIAP 2007) Sep 10-14, Modena, Italy http://www.iciap2007.org
3rd International Conference on IT-Incident Management & IT-Forensics Sep 11-12, Stuttgart, Germany http://www.imf-conference.org/
ForenSec Canada 2007 Sep 17-18, Regina, Saskatchewan, Canada http://www.csiservices.ca/events.html#ForenSec
SANS Network Security Sep 22-30, Las Vegas, NV http://www.sans.org/ns2007/?portal=69456f95660ade45be29c00b0c14aea1
Black and White Ball Sep 25-28, London, UK http://www.theblackandwhiteball.co.uk/
Wisconsin Association of Computer Crimes Investigators/Forensic Association of Computer Technologists Sep 26-28, Milwaukee, WI http://www.byteoutofcrime.org
6th Annual Internet Crimes Against Children National Conference Oct 15-18, San Jose, CA http://www.icactraining.org/website/registration.html
ToorCon 9 Oct 19-21, San Diego, CA http://toorcon.org/intro.php
BlackHat Japan - Briefings Oct 23-26, Tokyo, Japan http://www.blackhat.com/html/bh-japan-07/bh-jp-07-main.html
Global Conference on Economic and High-Tech Crime (NW3C Membership Required) Oct 24-26, Crystal City, VA https://conference.nw3c.org/index.cfm
European Network Forensic and Security Conference 2007 Oct 24-26, Zuyd University, Heerlen, Netherlands http://www.enfsc2007.com/
Techno-Forensics Conference Oct 29 - 31, Rockville, MD http://www.techsec.com/html/TechnoForensics2007.html
Computer Security Institute Annual Meeting Nov 3-9, Arlington, VA http://www.csiannual.com/
First Forensic Forum Conference (F3 Conference) Nov 3-5, Tortworth, England http://www.f3.org.uk/
DeepSec IDSC Nov 22-24, Vienna, Austria http://deepsec.net/
Digital Forensic Forum Prague 2007 Nov 26-27, Prague, Czech Republic http://www.dff-prague.com/
PacSec Applied Security Conference Nov 29-30, Tokyo, Japan http://www.pacsec.jp/index.html
SANS Security 2008 Jan 11-19, New Orleans, LA http://www.sans.org/security08/
DoD Cyber Crime Conference 2008 Jan 13-18, St. Louis, MO http://www.dodcybercrime.com/
4th Annual IFIP WG 11.9 International Conference on Digital Forensics Jan 27-30, Kyoto, Japan http://www.ifip119-kyoto.org/doku.php
AAFS Annual Meeting 2008 Feb 18-23, Washington, DC http://aafs.org/default.asp?section_id=meetings&page_id=aafs_annual_meeting
CanSecWest Security Conference 2008 Mar 19-21, Vanouver, BC, Canada http://cansecwest.com/
EuSecWest Security Conference 2008 May 21-22, London, England http://eusecwest.com/
Techno-Security 2008 Jun 01-04, Myrtle Beach, SC http://www.techsec.com/html/Techno2008.html
Usenix Annual Technical Conference Jun 22-27, Boston, MA http://www.usenix.com/events/usenix08/
International Association of Forensic Sciences Annual Meeting Jul 21-26, New Orleans, LA http://www.iafs2008.com/
Digital Forensic Research Workshop Aug 11-13, Baltimore, MD http://www.dfrws.org

On-going / Continuous Training

Title Date/Location or Venue Website
Basic Computer Examiner Course - Computer Forensic Training Online Distance Learning Format http://www.cftco.com
Linux Data Forensics Training Distance Learning Format http://www.crazytrain.com/training.html
SANS On-Demand Training Distance Learning Format http://www.sans.org/ondemand/?portal=69456f95660ade45be29c00b0c14aea1
MaresWare Suite Training First full week every month, Atlanta, GA http://www.maresware.com/maresware/training/maresware.htm
Evidence Recovery for Windows Vista™ First full week every month, Brunswick, GA http://www.internetcrimes.net
Evidence Recovery for Windows Server® 2003 R2 Second full week every month, Brunswick, GA http://www.internetcrimes.net
Evidence Recovery for the Windows XP™ operating system Third full week every month, Brunswick, GA http://www.internetcrimes.net
Computer Forensics Training and CCE™ Testing for Litigation Support Professionals Third weekend of every month (Fri-Mon), Dallas, TX http://www.md5group.com

Scheduled Training Courses

Title Date/Location Website Limitation
SMART for Linux Sep 03-06, Austin, TX http://asrdata.com/training/training2.html
Paraben Handheld Forensic Course Sep 04-07, Mississauga, Ontario, Canada http://www.paraben-training.com/
EnCase v6 Computer Forensics II – Private Sector Sep 04-07, Houston, TX http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Computer Forensics I Sep 04-07, Melbourne, Australia and United Kingdom http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 FIM/Mobile Use of EE Live Forensics Sep 04-07, The Netherlands http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Computer Forensics II Sep 04-07, Austin, TX http://www.guidancesoftware.com/training/course_schedule.aspx
AccessData BootCamp Sep 04-06, Mississippi State University http://www.security.cse.msstate.edu/ftc/schedule.php Limited to Law Enforcement
Computer Forensics Training and CCE™ Testing for Litigation Support Professionals Sep 07-10, New York City, NY http://www.md5group.com
Paraben E-Discovery: E-mail & Mobile E-mail Devices Sep 10-14, Potomac Falls, VA http://www.paraben-training.com/
Paraben Advanced Cell Phone Forensics Sep 10-12, San Diego, CA http://www.paraben-training.com/
EnCase v6 Computer Forensics II Sep 11-14, United Kingdom and Singapore http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Computer Forensics I Sep 11-14, Houston, TX and Washington, DC http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase Enterprise v6 - Phase I Sep 11-14, Chicago, IL http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Computer Forensics I - Private Sector Sep 11-14, Los Angeles, CA http://www.guidancesoftware.com/training/course_schedule.aspx
First Responder to Digital Evidence Program (FRDE) Sep 11-13, FLETC, Glynco, GA http://www.fletc.gov/training/programs/computer-financial-investigations/technology-investigation/ Limited to Law Enforcement
AccessData Applied Decryption Sep 11-13, Dallas, TX http://www.accessdata.com/training
Paraben Advanced SIM Card Forensics Sep 13-14, San Diego, CA http://www.paraben-training.com/
Paraben Network Incident Response Sep 17-21, Potomac Falls, VA http://www.paraben-training.com/
Enterprise Data Forensics Sep 17-19, Austin, TX http://asrdata.com/training/training2.html
EnCase v6 Computer Forensics II – Private Sector Sep 18-21, Los Angeles, CA http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Computer Forensics II Sep 18-21, Houston, TX and Leipzig, Germany http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Advanced Computer Forensics Sep 18-21, Sydney, Australia and United Kingdom http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Computer Forensics I Sep 18-21, Toronto, Canada http://www.guidancesoftware.com/training/course_schedule.aspx
Paraben Cellular/GPS Signal Analysis Sep 20-21, San Diego, CA http://www.paraben-training.com/
Internet Investigations Training Program (IITP) Sep 24-28, Glynco, GA http://www.fletc.gov/training/programs/computer-financial-investigations/technology-investigation Limited to Law Enforcement
Macintosh Forensic Survival Course Sep 24-28, Santa Ana, CA http://www.phoenixdatagroup.com/cart/index.php
BlackBag Introductory MacIntosh Forensics Sep 24-28, Richmond, VA http://www.blackbagtech.com/products/training.htm Limited to Law Enforcement
Paraben Advanced Cell Phone Forensics Sep 24-26, Potomac Falls, VA http://www.paraben-training.com/
Introduction to Cyber Crime Sep 24-26, Jackson, Mississippi http://www.security.cse.msstate.edu/ftc/schedule.php Limited to Law Enforcement
EnCase v6 FIM/Mobile Use of EE Live Forensics Sep 25-28, United Kingdom http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Computer Forensics I - Private Sector Sep 25-28, Houston, TX http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Advanced Computer Forensics Sep 25-28, Los Angeles, CA http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Computer Forensics II Sep 25-28, Toronto, Ontario, Canada http://www.guidancesoftware.com/training/course_schedule.aspx
AccessData Applied Decryption Sep 25-27, Chicago, IL http://www.accessdata.com/training
AccessData BootCamp Sep 25-27, Solna, SE http://www.accessdata.com/training
Forensics Tools and Techniques Sep 26-28, Jackson, Mississippi http://www.security.cse.msstate.edu/ftc/schedule.php Limited to Law Enforcement
Paraben Advanced SIM Card Forensics Sep 27-28, Potomac Falls, VA http://www.paraben-training.com/
SMART for Linux Oct 01-04, Austin, TX http://asrdata.com/training/training2.html
Paraben Wireless Forensics Oct 01-03, San Diego, CA http://www.paraben-training.com/
EnCase v6 Computer Forensics I - Private Sector Oct 02-05, Chicago, IL http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 FIM/Mobile Use of EE Live Forensics Oct 02-05, Los Angeles, CA, Washington, DC and Perth, Australia http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Computer Forensics II – Private Sector Oct 02-05, Houston, TX http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Computer Forensics I Oct 02-05, The Netherlands http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 EnScript Programming - Phase II Oct 02-05, Washington DC http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Advanced Internet Examinations Oct 02-05, Toronto, Canada http://www.guidancesoftware.com/training/course_schedule.aspx
Paraben Cellular/GPS Signal Analysis Oct 04-05, Potomac Falls, VA http://www.paraben-training.com/
Computer Forensics Training and CCE™ Testing for Litigation Support Professionals Oct 05-08, Denver, CO http://www.md5group.com
Paraben Handheld Forensic Course Oct 08-11, San Diego, CA and Potomac Falls, VA http://www.paraben-training.com/
SMART Windows Data Forensics Oct 08-10, Austin, TX http://asrdata.com/training/training2.html
EnCase v6 Network Intrusion Investigations - Phase I Oct 09-12, Los Angeles, CA and The Netherlands http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 FIM/Mobile Use of EE Live Forensics Oct 09-12, Sydney, Australia http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Computer Forensics I Oct 09-12, Houston, TX http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Advanced Internet Examinations Oct 09-12, Washington, DC and United Kingdom http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Advanced Computer Forensics Oct 09-12, Washington DC http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Computer Forensics II – Private Sector Oct 09-12, Chicago, IL http://www.guidancesoftware.com/training/course_schedule.aspx
Computer Forensics Training and CCE™ Testing for Litigation Support Professionals Oct 12-15, Dallas, TX http://www.md5group.com
Digital Evidence Acquisition Specialist Training Program (DEASTP) Oct 15-26, FLETC, Glynco, GA http://www.fletc.gov/training/programs/computer-financial-investigations/technology-investigation/ Limited to Law Enforcement
BlackBag Introductory MacIntosh Forensics Oct 15-19, Tacoma, WA http://www.blackbagtech.com/products/training.htm
Paraben E-Discovery: E-mail & Mobile E-mail Devices Oct 15-19, Mississauga, Ontario, Canada http://www.paraben-training.com/
Macintosh Forensic Survival Course Oct 15-19, Philadelphia, PA http://www.phoenixdatagroup.com/cart/index.php
EnCase v6 Network Intrusion Investigations - Phase II Oct 15-18, Los Angeles, CA http://www.guidancesoftware.com/training/course_schedule.aspx
Paraben Advanced Cell Phone Forensics Oct 15-17, Mississauga, Ontario, Canada http://www.paraben-training.com/
EnCase v6 Computer Forensics I - Private Sector Oct 16-19, Washington DC http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Network Intrusion Investigations - Phase I Oct 16-19, United Kingdom http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Computer Forensics II Oct 16-19, Washington DC and Houston, TX http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Advanced Computer Forensics Oct 16-19, Chicago, IL http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase Enterprise v6 - Phase II Oct 16-19, Chicago, IL http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Network Intrusion Investigations - Phase II Oct 16-19, The Netherlands http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Advanced Internet Examinations Oct 16-19, Austin, TX http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 EnScript Programming - Phase I Oct 16-19, Toronto, Canada http://www.guidancesoftware.com/training/course_schedule.aspx
Paraben Advanced SIM Card Forensics Oct 18-19, Mississauga, Ontario, Canada http://www.paraben-training.com/
X-Ways Forensics Oct 22-24, Hong Kong http://www.x-ways.net/training/hong_kong.html
EnCase v6 Computer Forensics II Oct 23-26, Toronto, Canada http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Advanced Internet Examinations Oct 23-26, Canberra, Australia http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Computer Forensics I - Private Sector Oct 23-26, Houston, TX http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Computer Forensics I Oct 23-26, Los Angeles, CA and Singapore http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase eDiscovery with v6 Oct 23-26, Washington DC http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Computer Forensics II – Private Sector Oct 23-26, Washington DC http://www.guidancesoftware.com/training/course_schedule.aspx
File Systems Revealed Oct 25-26, Hong Kong http://www.x-ways.net/training/hong_kong.html
SARC Steganography Examiner Training Oct 26 - 27, Gaithersburg, MD (Techno Forensics Conference 2007) http://www.sarc-wv.com/training.aspx
Seized Computer Evidence Recovery Specialist (SCERS) Oct 29-Nov 9, FLETC, Glynco, GA http://www.fletc.gov/training/programs/computer-financial-investigations/technology-investigation/ Limited to Law Enforcement
Search and Seizure of Computers and Electronic Evidence Oct 29-30, Oxford, MS http://www.security.cse.msstate.edu/ftc/schedule.php Limited to Law Enforcement
EnCase v6 Computer Forensics II Oct 30-Nov 02, Los Angeles, CA and The Netherlands http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Advanced Computer Forensics Oct 30-Nov 02, Washington DC and Toronto, Ontario, Canada http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Computer Forensics I - Private Sector Oct 30-Nov 02, United Kingdom http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Network Intrusion Investigations - Phase I Oct 30-Nov 02, Chicago, IL http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase Enterprise v6 - Phase I Oct 30-Nov 02, Washington DC http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Computer Forensics II – Private Sector Oct 30-Nov 02, Houston, TX http://www.guidancesoftware.com/training/course_schedule.aspx
Paraben Handheld Forensic Course Nov 05-08, Mississauga, Ontario, Canada http://www.paraben-training.com/
SMART for Linux Nov 05-08, Austin, TX http://asrdata.com/training/training2.html
EnCase v6 Network Intrusion Investigations - Phase II Nov 05-08, Chicago, IL http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase Enterprise v6 - Phase II Nov 05-08, Washington DC http://www.guidancesoftware.com/training/course_schedule.aspx
Introduction to Cyber Crime Nov 05-07, Jackson, Mississippi http://www.security.cse.msstate.edu/ftc/schedule.php Limited to Law Enforcement
EnCase v6 Computer Forensics II – Private Sector Nov 06-09, United Kingdom http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Advanced Computer Forensics Nov 06-09, Los Angeles, CA http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 NTFS Nov 06-09, Washington DC http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Computer Forensics II Nov 06-09, Houston, TX http://www.guidancesoftware.com/training/course_schedule.aspx
AccessData BootCamp Nov 06-08, Austin, TX http://www.accessdata.com/training
AccessData Windows Forensics Nov 06-08, Solna, Sweden http://www.accessdata.com/training
Forensics Tools and Techniques Nov 07-09, Jackson, Mississippi http://www.security.cse.msstate.edu/ftc/schedule.php Limited to Law Enforcement
SMART Linux Data Forensics Nov 12-14, Austin, TX http://asrdata.com/training/training2.html
EnCase v6 Computer Forensics I - Private Sector Nov 13-16, Houston, TX http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Advanced Computer Forensics Nov 13-16, The Netherlands and United Kingdom http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Computer Forensics I Nov 13-16, Sydney, Australia and Singapore http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Advanced Internet Examinations Nov 13-16, Chicago, IL and Los Angeles, CA http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Computer Forensics II Nov 13-16, Washington DC http://www.guidancesoftware.com/training/course_schedule.aspx
AccessData BootCamp Nov 13-15, Mississippi State University http://www.security.cse.msstate.edu/ftc/schedule.php Limited to Law Enforcement
EnCase v6 Computer Forensics II Nov 20-23, Toronto, Canada http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 FIM/Mobile Use of EE Live Forensics Nov 20-23, Vancouver, BC http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 NTFS Nov 27-30, Vancouver, BC http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Network Intrusion Investigations - Phase I Nov 27-30, Sydney, Australia http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Computer Forensics II – Private Sector Nov 27-30, Houston, TX http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Computer Forensics I Nov 27-30, Washington DC http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase eDiscovery with v6 Nov 27-30, Los Angeles, CA http://www.guidancesoftware.com/training/course_schedule.aspx
Computer Network Investigation Training Program (CNITP) Dec 03-14, Glynco, GA http://www.fletc.gov/training/programs/computer-financial-investigations/technology-investigation Limited to Law Enforcement
Internet Investigations Training Program (IITP) Dec 03-07, Glynco, GA http://www.fletc.gov/training/programs/computer-financial-investigations/technology-investigation Limited to Law Enforcement
SMART for Linux Dec 03-06, Austin, TX http://asrdata.com/training/training2.html
Introduction to Cyber Crime Dec 03-05, Mississippi State University http://www.security.cse.msstate.edu/ftc/schedule.php Limited to Law Enforcement
EnCase v6 Computer Forensics I Dec 04-07, Chicago, IL; Los Angeles, CA; Houston, TX; and United Kingdom http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Network Intrusion Investigations - Phase I Dec 04-07, Washington DC http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Computer Forensics II Dec 04-07, Washington DC, Leipzig, Germany and Toronto, Ontario, Canada http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Advanced Internet Examinations Dec 04-07, Vancouver, BC http://www.guidancesoftware.com/training/course_schedule.aspx
AccessData Internet Forensics Dec 04-06 , Solna, Sweden http://www.accessdata.com/training
Forensics Tools and Techniques Dec 05-07, Mississippi State University http://www.security.cse.msstate.edu/ftc/schedule.php Limited to Law Enforcement
EnCase v6 Network Intrusion Investigations - Phase II Dec 10-13, Washington DC http://www.guidancesoftware.com/training/course_schedule.aspx
Enterprise Data Forensics Dec 10-12, Austin, TX http://asrdata.com/training/training2.html
EnCase v6 Computer Forensics II Dec 11-14, Chicago, IL; Houston, TX; Los Angeles, CA; United Kingdom; and Melbourne, Australia http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Advanced Computer Forensics Dec 11-14, Washington DC http://www.guidancesoftware.com/training/course_schedule.aspx
X-Ways Forensics Dec 17-19, Singapore http://www.x-ways.net/training/SGP.html
EnCase v6 Advanced Computer Forensics Dec 17-20, Chicago, IL and Los Angeles, CA http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 FIM/Mobile Use of EE Live Forensics Dec 17-20, Washington DC http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 Advanced Internet Examinations Dec 17-20, Washington, DC and United Kingdom http://www.guidancesoftware.com/training/course_schedule.aspx
EnCase v6 NTFS Dec 17-20, Los Angeles, CA http://www.guidancesoftware.com/training/course_schedule.aspx
Paraben Advanced Cell Phone Forensics Dec 17-19, Mississauga, Ontario, Canada http://www.paraben-training.com/
EnCase v6 Computer Forensics II – Private Sector Dec 18-21, Houston, TX http://www.guidancesoftware.com/training/course_schedule.aspx
Paraben Advanced SIM Card Forensics Dec 20-21, Mississauga, Ontario, Canada http://www.paraben-training.com/