2022 Agenda

September 13, 2022

8:00 AM EST

Registration

9:00 AM EST

Opening Remarks

9:10 AM EST

Anatomy of an Attack – Using System Roles In Your Ransomware Investigation Slides | Video

9:40 AM EST

Impacts on Ransomware Investigations, or Why Not To Focus On The EXE Slides | Video

10:10 AM EST

Coffee Break

10:25 AM EST

The De-RaaSing of Ransomware Slides | Video

10:55 AM EST

When Ransomware Attacks a School District, You Get Detention Slides | Video

11:25 AM EST

Panel: How Law Enforcement Gets Involved With Ransomware Cases Video

11:55 AM EST

Lunch

1:00 PM EST

Malware Forensics for Uncommon Payloads: LNK Files and the Ransomware Ecosystem Slides | Video

1:35 PM EST

Track 1 Ransomware vs Other Breaches: Similarities & Key Differences Slides | Video

Track 2 The Crisis Management Stack or Why You Get Told to do Stupid Things During a Response Slides | Video

2:10 PM EST

Track 1 Successful DFIR From Preparation and Monitoring Slides | Video

Track 2 Alternative Ways to Detect Mimikatz Slides | Video

2:40 PM EST

Coffee Break

2:55 PM EST

Track 1 Sample The Ransomware Families Using a DFIR Framework Slides

Track 2 Operation Cyber Centurion: A Proactive Threat Hunting Based Approach To Preventing Ransomware Attacks

3:30 PM EST

Track 1 Host-Based Ransomware Indicators Slides | Video

Track 2 Ransomware Incident Investigation and Cryptocurrency Tracing with OSINT Slides

4:05 PM EST

Have Fun with It!: Tracking Ransomware Operator Lateral Movement and Recovering Deleted Files the Easy Way! Slides | Video

4:35 PM EST

Closing

4:45 PM EST

Networking Reception

September 14, 2022 (Separate tickets)

9:00 AM - 12:00 PM EST

WORKSHOP: RansomCare: Turning Your Tabletop Exercises into Action

WORKSHOP: Cyber Triage (Sponsored)