Open Source Digital Forensics Conference (OSDFCon) Talks & Presentations

BasisTech

Forensic Acquisition of Websites, Webpages and Online Services with Open Source Tools

Explore open-source tools for forensically acquiring online evidence, including websites, social media, and cloud services. Learn techniques for preserving digital content with verifiable processes and blockchain timestamps.

• YouTube
• 30 minutes
• On-Demand
• Conference Talk

BasisTech

I Know What Your AD Did Last Summer - Talks About Active Directory

Explore Active Directory security, lateral movement, and privilege escalation techniques. Learn forensic approaches for investigating AD incidents using open-source tools, with insights for both red and blue teams.

• YouTube
• 30 minutes
• On-Demand
• Conference Talk

BasisTech

Effectively Using RegRipper 3.0

Explore efficient techniques for utilizing RegRipper 3.0 in digital forensics and incident response, presented by experienced DFIR professional Harlan Carvey at OSDFCon 2020.

• YouTube
• 20 minutes
• On-Demand
• Conference Talk

BasisTech

Go for Launch - Getting Started with Practical APOLLO Analysis

Practical guide to using APOLLO Python script for extracting and analyzing data from macOS and iOS devices, focusing on user activity, device status, application usage, and suspicious events.

• YouTube
• 45 minutes
• On-Demand
• Conference Talk

BasisTech

Putting Together the RDPiece

Explore RDP Bitmap Cache forensics for ransomware investigations. Learn to extract, analyze, and reconstruct crucial evidence often overlooked in digital forensics and incident response.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk

BasisTech

Open Source Mobile Forensics Using Python

Learn to process and analyze mobile device extractions using open-source Python tools iLEAPP and ALEAPP. Gain insights into artifact parsing, data analysis, and resources for creating custom parsers.

• YouTube
• 32 minutes
• On-Demand
• Conference Talk

BasisTech

Exploring the Wonders of Timesketch and Jupyter

Harness the power of notebooks and Timesketch to solve forensic challenges. Learn data analysis, visualization, and API integration for effective digital investigations.

• YouTube
• 1 hour 8 minutes
• On-Demand
• Conference Talk

BasisTech

Cybersecurity Zero to Hero with CyberChef

Learn to perform complex cybersecurity tasks using CyberChef, a user-friendly web app that simplifies malware analysis and streamlines workflows for both beginners and experienced analysts.

• YouTube
• 32 minutes
• On-Demand
• Conference Talk

BasisTech

KAPE + EZ Tools and Beyond

Explore latest open-source forensic tools for event logs and NTFS files, including KAPE for efficient data collection and processing. Learn to extend KAPE's capabilities for customized investigations.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk

BasisTech

Velociraptor - Dig Deeper

Explore Velociraptor's powerful VQL for efficient DFIR hunting at scale. Learn to perform on-endpoint analysis, create custom detections, and implement real-time monitoring rules for rapid incident response.

• YouTube
• 32 minutes
• On-Demand
• Conference Talk

BasisTech

ARTHIR - ATT&CK Remote Threat Hunting Incident Response Windows Tool

Modular framework for remote threat hunting and incident response on Windows systems, mapping capabilities to MITRE ATT&CK Framework. Improves on Kansa with expanded functionality and community collaboration.

• YouTube
• 31 minutes
• On-Demand
• Conference Talk

BasisTech

Incident Recorder

Demonstration of an open-source automation tool for Security Incident recorders, designed to track and document incidents efficiently for forensic and legal purposes.

• YouTube
• 29 minutes
• On-Demand
• Conference Talk

BasisTech

Autopsy Update

Comprehensive update on Autopsy digital forensics tool, covering new features like Web Domain interfaces, scoring, and Solr 8 upgrade. Explores improvements in UI, artifact pipelines, and integration with other forensic tools.

• YouTube
• 31 minutes
• On-Demand
• Conference Talk

BasisTech

Autopsy Scoring - Finding the Relevant Data with Analysis Results

Explore Autopsy's scoring features to quickly identify relevant data in digital forensics investigations, combining analysis results for efficient case prioritization.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

BasisTech

Where Have UAL Been?

Explore Microsoft's User Access Logs on Windows Servers, including authentication details, record retention, and parsing tools. Learn how these logs can be utilized in digital forensics and incident response.

• YouTube
• 32 minutes
• On-Demand
• Conference Talk