You can teach an old dog new tricks: Applying old school DFIR techniques to healthcare and medical devices

Medical devices have become more interconnected, and it has become important to understand how to deal with these devices during a DFIR process. The concept of interconnected medical devices is fairly new and with the ongoing pandemic a necessity. This means that medical device forensics is a new and emerging field. However, is the data contained on medical devices really something new, or can old school DFIR practises be applied to these devices? This talk centers around research done in forensically examining compromised or pen-tested medical devices using old school techniques. There will be practical examples from a cardiac patient monitor, Apple Health kit, CPAP machine and insulin pumps.