Скачать или смотреть iOS Third Party Apps Analysis how to use the new reference guide poster

Data Leakage, theft and privacy issues are common concerns in DFIR. Third party applications are often the culprit for these types of data breaches and unwanted access. While privacy is always a concern, in DFIR we also rely on third party application data to provide context to the clues we uncover. The new iOS Third Party Apps Analysis Reference Guide Poster (https://www.sans.org/security-resourc...) provides a list of the most interesting files and folders in the Data and Shared folders for the most commonly used third-party apps. This webcast explains how to leverage this poster's content to perform real investigations and research. The presenter also shows live examples on how to analyze Third Party Apps on test images.

Speaker Bio
Mattia Epifani

Today, Mattia is CEO of Reality Net System Solutions, an Italian infosec and digital forensics consulting company, where he works as a digital forensics analyst and expert for judges, prosecutors, lawyers, and private companies, at times serving as an expert court witness.

Mattia also brings his passion and expertise to the classroom as an instructor for SANS FOR500: Windows Forensic Analysis and FOR585: Smartphone Forensic Analysis In-Depth (https://www.sans.org/cyber-security-c..., a topic he's particularly passionate about. "I spend my days trying to acquire and analyze digital devices, smartphones in particular," he says. An expert with a vast knowledge of tools and techniques for forensic investigation, Mattia always tries to find a way to achieve his goal even when no tools exist. "I do forensics on a daily basis testing, developing new methods, and going deeper and deeper, and I love teaching by providing real cases and scenarios to my students," he says.

First introduced to SANS as a student, Mattia attended the 2010 DFIR Summit then proceeded to take four years of training because he loved the people and content at SANS so much. From there, he became an instructor.