Reconstructing the Intrusion: DFIR Report Workshop
Join us at DC604 this October for a hands-on session exploring the data from a real-world intrusion using the DFIR Report labs. This interactive workshop will guide attendees through the process of analyzing evidence, piecing together events, and building a complete incident timeline.
The session will kick off with a short talk on how to approach incident response and leverage diverse data sources to uncover key details. Participants will then dive into lab work, supported by the DC604 team, with access to a full report from DFIR Report analysts for additional guidance.
Whether you’re based in Vancouver or just visiting, this is a great opportunity to sharpen your investigation skills, explore DFIR Labs firsthand, and connect with others interested in incident response and digital forensics.
IMPORTANT: This is a hands-on workshop, bring your laptop!
Speaker
Kostas is a seasoned security researcher with deep expertise in intrusion analysis, incident response, and threat intelligence. He helps shape The DFIR Report’s direction and services from behind the scenes. As an independent consultant, Kostas runs his own consultancy, partnering with businesses to improve detection and response capabilities.
Socials:
Personal Website: https://kostas.page/
LinkedIn: https://www.linkedin.com/in/kostastsale/
Twitter: https://x.com/kostastsale