The SANS Institute

Dear Colleague,

Cyber crime is on a steep rise. More data breaches have already
occurred in 2008 than all of 2007. Cyber criminals are becoming more
sophisticated...are you? Come to the What Works in Computer Forensics
and Incident Response Summit October 13-14, 2008, to learn with best in
the field. Eoghan Casey, Drew Fahey, and Harlan Carvey join presenters
from the USSS, FBI, and the DoD Cyber Crime Center to discuss new
forensic techniques and strategies that will take a byte out of crime.

http://www.sans.org/info/32648

Two exciting keynote presentations have been added to the SANS WhatWorks
in Incident Response and Forensic Solutions Summit agenda that provide
a unique opportunity to learn, from real-life examples, the secrets of
two of the world's top cyber incident response and forensics experts.

- Steve Shirley, Department of Defense Cyber Crime Center
(Keynote: October 13, 2008)

Steven D. Shirley is Executive Director of the Department of Defense
Cyber Crime Center (DC3). The DC3 incorporates the Defense Computer
Forensics Lab, DoD's only accredited lab for conducting deep forensic
examinations of electronic media; the Defense Computer Investigations
Training Program, a training center to create DoD cyber crime
investigators and digital forensic examiners; and the Defense Cyber
Crime Institute, which performs futures exploration and tests and
validates forensic software and hardware for investigative applications.

- Richard Bejtlich, Director of Incident Response, General Electric
(Keynote: October 14, 2008)

Richard Bejtlich is Director of Incident Response for General Electric.
Prior to joining GE, Richard operated TaoSecurity LLC, and ManTech
Corporation's Computer Forensics and Intrusion Analysis division. He
investigated intrusions as part of Foundstone's incident response team,
and monitored client networks for Ball Corporation. Richard began his
digital security career as a military intelligence officer at the Air
Force Computer Emergency Response Team (AFCERT), Air Force Information
Warfare Center (AFIWC), and Air Intelligence Agency (AIA). Richard is
a graduate of Harvard University and the United States Air Force
Academy.

He wrote "The Tao of Network Security Monitoring," and "Extrusion
Detection," and co-authored "Real Digital Forensics." He also writes
for his blog (taosecurity.blogspot.com) and SearchSecurity.com, and
teaches for Black Hat.

In addition, you will learn from the best digital forensic teams from
IBM ISS, Intelguardians, Mandiant, and Verizon Cybertrust who will share
some secret key dos and don'ts for incident response and forensics.

- Drew Fahey (Creator of HELIX, e-fense Inc.)
- Bryan Sartin (Creator of the Verizon Data Breach Report, Verizon)
- Harlan Carvey (IBM ISS, Author of Windows Forensic Analysis)
- Cory Altheide (Author of Unix and Linux Forensic Analysis)
- Ovie Carroll and Bret Padres (Cyberspeak Podcast)
- Aaron Walters (Volatile Systems)
- Eoghan Casey (Author of Handbook of Computer Crime Investigation)
- Mike Poor and Tom Liston (Intelguardians)

These teams and individuals have all been called upon regularly to fend
off bank attacks initiated from Russia, attacks on government
contractors from China, and to respond to the most high profile cases
including Hannaford, TD Ameritrade, and TJ Maxx.

What people are saying about Summits:

"You learn from the best in the industry. This was my first Summit.
I was very impressed." - John Thrasher, HQAGOSI/CSC

"Great networking and brainstorming with a broad cross section of
industries." - Adam Gaydosh, Antion

"Very informative. Provided up-to-date, critical, concise information
that I can use to do my job better." - Dale Johnson, Conoco Phillips
Pipeline Co.

I look forward to working with you and others in the field at the first
Incident Response and Forensics Solutions Summit on October 13-14, 2008,
at Caesars Palace in Las Vegas, NV. (http://www.sans.org/info/32648)

Best regards,
Rob Lee
SANS Faculty Fellow

**************************
SANS is pleased to announce our new Training and Events Calendar - an
easy way to see what opportunities are available to you during the
coming month! The current calendars are now available for download from
http://www.sans.org/info/7926. For another option, consider SANS' seven
ways to Train Without Travel at: http://www.sans.org/info/28689.

SANS Webcasts are free live Web broadcasts that allow you to hear a
knowledgeable speaker while viewing presentation slides that you
download in advance. To learn more or to subscribe to our Webcast
calendar go to http://www.sans.org/info/13271.

To change your subscription, address, or other information, visit
http://portal.sans.org. If you wish to have your name removed from our
mailing list, visit the site above, click on "update your account" and
check the box "Do not send any e-mail."

**************************

Back to newsletter list

Date:

From:

Subject:

Two Great Keynotes added to SANS WhatWorks in Incident Response and Forensics Solutions Summit, Las Vegas, October 13-14, 2008