All right, this is computer forensics file formats. Why, you should be using a f F four.
I'm Brian Die extremely CEO of Atlantic Data Forensics. I was a co founder of Mandiant now owned by Mandiant. Fireeye. That great big thing. Ah, was the first contract cybercrime instructor at the FBI Academy. Have background in military intelligence, and I have a whole bunch of certifications. If you want to reach me about any
any of these videos,
you can email me at Sai Buri atlantic DF dot com.
I also want to point out that little picture over there. The corner. Come run with us. We wear practitioners, Atlantic Data forensics. So we do a couple 100 cases a year. So everything you're gonna get from us in all of these videos, myself and the other investigators is all really life stuff. There's There's no theories in here. We're not. You know,
this seems like a good idea or anything else.
This is how we actually do it every day.
All right. So Atlantic Data Forensics, founded in 2007 headquartered Elkridge, Maryland, where a computer with a computer, forensics for civil and criminal litigation. Lots of cases We also do e discovery for law firms. That's large scale litigation. 400 mailboxes, a time type thing. Stuff like this
24 hour day incident response services. Our clients out there
internal, corporate and HR investigations a lot of insider type work, and we also do instant response training and exercises for our clients. We have offices additionally, in Denver and Detroit,
right prerequisites to for today's class again Pretty darn simple. Uh,
anybody that's seen planning to collect data out there this this is for them. Um, and if you're in a position where it might become necessary, even if it's not your primary duty or anything like that, But you think you might have to collect digital evidence. Good idea to pay attention here to always important to know what you're selecting for a file format. Kind of get to that later
course materials. You really don't need much of anything for this. We're not going to do any hands on at this point. So Internet connected computer always a good idea. Ah, there's some good good material out there. So we're gonna talk about thea half a four format, but you're gonna want to take a look at the O SDF con. That's the open source Digital forensics conference
presentation by Dr Bradley. Shots
about FF four. Good link There. There's the A f F four dot org's website, where they talk about all the stuff. And then, of course, they have these standards of recently ratified standard. But if for protocol on Get Hub, so good stuff to look at background reading wiser if yet
further technical questions always go there
really recommend Doc Schatz is presentation. It's It's excellent,
right? Target audience. We're talking about computer forensics professionals, obviously incident responders. Always good to know that stuff to information technology professionals. Because, of course, you could get called on to be making forensic images for something. And, of course, human re sources and legal professionals. Did you get yourself involved in that stuff too long?
A lot of inside investigations and things like this, so always helpful.
All right, are learning objectives for today we're gonna figure out what the heck is a FF for and why she would be interested in this is, as a forensic professional were to talk about some problems associated with common forensic file formats. We'll talk about the advantages of a F F four, and we're also going to talk to a few tools that currently support F four.