Cloud Forensics Workshop - AI Edition

Now in its seventh iteration since the initial launch [redacted], the Cloud Forensics Workshop has been a regular feature at multiple security conferences where students new to the industry or individuals interested in cross-training learn core concepts about digital forensics in the Cloud. The latest version of this training session - dubbed the "AI Edition" - now focuses on how artificial intelligence and automation can assist with a digital forensic investigation; including securing a compromised account, creating the necessary artifacts for forensic analysis; log indexing, correlation, and analysis to help identify suspicious activity or other unusual behaviors to generate a timeline of events. The workshop will also feature plenty of group discussions on recent advancements in forensic automation, how the Cloud has evolved from large-scale virtual servers to smaller scalable containers, how IoT devices have extended the logical boundaries of the Cloud, and key similarities and differences between the three major Cloud Service Providers. There will also be hands-on labs where students can learn more about automating tasks, mirroring and capturing packet data, and open-source tools and techniques that are commonly used in the field. Students will be given the opportunity to download sample data from a Cloud account prior to the start of the class to help better understand how to leverage these tools and techniques.

Older events, 2016 through 2020

I have had the honor and privilege of teaching at various events across the country, starting in 2016 with my very first class on security analysis. I switched my focus to digital forensics in Cloud computing environments the following year; and apart from the occasional talk, I have chosen to remain committed to my life's work as an instructor on Cloud DFIR.

* Instructor, BSides Charm 2016, “Building Blocks: An Introduction to Security Analysis”
* Instructor, BSides DC 2016, “Building Blocks: The Security Analyst’s Toolbox”
* Instructor, BSides NoVA 2017, “Building Blocks Essentials: The How-to’s and Why’s of Security Analysis”
* Instructor, BSides DC 2017, “Dissecting the Cloud: Understanding Cloud-based Digital Forensics”
* Instructor, BSides Charm 2018, “Cloudbusting: Understanding Cloud-based Digital Forensics”
* Speaker, BSides Idaho Falls 2018, “The Instructor’s Tale: Inspiring, Teaching, Empowering, and Mentoring the Next Generation of Hackers”
* Instructor, BSides NoVA 2019, “Cloudbusting: Understanding Cloud-based Digital Forensics”
* Instructor, HouSecCon 2019, “Cloudbusting: Cloud Forensics Workshop and Challenge”
*Instructor, BSides Kansas City 2019, “Cloud Forensics Workshop and Challenge”
* Instructor, BSides Idaho Falls 2019, “Cloud Forensics Workshop and Challenge”
* Instructor, BSides DC 2019, “Cloud Forensics Workshop and Challenge”
* Instructor, BSides Tampa 2020, “Cloud Forensics Workshop and Challenge”
* Instructor, BSides NoVA 2020, “Cloud Forensics Workshop and Challenge v.2.0”

Older events, 2021 through 2024

Other conferences where I have taught classes or given a presentation.

* Instructor, BSides Idaho Falls 2021, “Cloud Forensics Challenge – COVID Recovery Edition”
* Speaker, BSides Idaho Falls 2021, “Migrate! COVID-19 and Operation WFH”
* Instructor, Cyberjutsu Con 3.0, "Cloud Forensics Workshop: Post-COVID Hangover Edition"
* Instructor, BSides Kansas City 2022, “Cloud Forensics Challenge – COVID Recovery Edition”
* Instructor, BSides Tampa 2023, “Cloud Forensics Workshop – Lab Rat Edition”
* Instructor, BSides Kansas City 2024, “Cloud Forensics Workshop – AI Edition”
* Instructor, BSides Las Vegas 2024, "Cloud Forensics Workshop - AI Edition"