Find Out What We’ve Got Lined Up for #MVS2021

Our full agenda is available for you to view. Every presentation will also feature a Q&A and Discord activity — so be sure to join us live to get the most out of every session.

VIEW BELOW

MVS21 AGENDA

Discover What You’ll Learn at MVS2021

RESULTS:

May

06

TYPE

Lecture

THEME

Cloud

Corporate Investigations

TIME

14:00 EDT

Forensic Considerations for Cloud Storage Data

Jamie McQuaid

In this Lecture:

Do you have a response plan for dealing with data stored in the cloud? Do you have the necessary accounts, access, logging, and knowledge on what to do if you need to collect evidence stored in AWS, Azure, or other provider or service? Maybe your organization has fully shifted to a cloud first approach or perhaps it’s still thinking about it (likely somewhere in the middle) but understanding and preparing for that time is best done beforehand and not during an incident. Does it make sense to preserve and download all the relevant data and conduct your investigation completely on-premise or is there a time where you may want to do your analysis in the cloud? Your answer is likely somewhere in the middle for that as well.

In this talk, Jamie McQuaid will detail the various sources of evidence that may reside in the cloud, the prerequisites needed to access it, and discuss the best ways to collect and analyze that data to ensure integrity is maintained and you get all the relevant data you need for your investigation. The focus will be on data sources stored in AWS and Azure but we will also call out situations where cloud data may need to be collected elsewhere as well. As with anything in DFIR, there isn’t always one answer that fits every situation so we’ll discuss several options and will likely say “it depends” a lot.

Expand

REGISTER NOW
Date Details Speaker Session Type Content Theme Timezone

May

06

Forensic Considerations for Cloud Storage Data

Jamie McQuaid

Lecture

Cloud

Corporate Investigations

14:00 EDT

In this Lecture:

Do you have a response plan for dealing with data stored in the cloud? Do you have the necessary accounts, access, logging, and knowledge on what to do if you need to collect evidence stored in AWS, Azure, or other provider or service? Maybe your organization has fully shifted to a cloud first approach or perhaps it’s still thinking about it (likely somewhere in the middle) but understanding and preparing for that time is best done beforehand and not during an incident. Does it make sense to preserve and download all the relevant data and conduct your investigation completely on-premise or is there a time where you may want to do your analysis in the cloud? Your answer is likely somewhere in the middle for that as well.

In this talk, Jamie McQuaid will detail the various sources of evidence that may reside in the cloud, the prerequisites needed to access it, and discuss the best ways to collect and analyze that data to ensure integrity is maintained and you get all the relevant data you need for your investigation. The focus will be on data sources stored in AWS and Azure but we will also call out situations where cloud data may need to be collected elsewhere as well. As with anything in DFIR, there isn’t always one answer that fits every situation so we’ll discuss several options and will likely say “it depends” a lot.

Expand

REGISTER NOW
SELECT AND REGISTER FOR SESSIONS

Note: Once you’ve registered for MVS21, you will be able to manage all your events via your MVS21 event hub.

#MVS21 #MVS21

MVS MERCH

Get YOUR SUMMIT ON

We’re offering exclusive merch to help you get in the spirit of MVS! Check out what apparel we have available and remember that all profits go to Child Rescue Coalition.

Use code MVS2021 at checkout for 10% off!

BROWSE MERCH