Welcome to this year's conference!
Step into the digital morgue and join us for a first-of-its-kind forensic investigation into why storage devices fail. Based on an unprecedented analysis of over 211,000 data recovery cases from around the globe, this session offers a rare glimpse into the secret lives and deaths of hard drives, SSDs, and more.
You'll learn the true frequency of different failure types—from simple corruption to catastrophic mechanical breakdowns—and see which devices are most susceptible. We'll also uncover fascinating insights, including how recovery challenges differ from country to country and the shocking difference between a drive's reported health and its actual condition. This is the story of data's final moments, told through the evidence left behind.
Are you struggling with digital evidence backlogs? Are you waiting days or weeks for lab results while critical leads go cold? Are you losing access to mobile devices from victims and witnesses? It’s time to take control and boost your confidence in the field. Join us for a fast-paced, practical session to learn how modern digital forensic triage can turn hours into just minutes — without sacrificing forensic integrity.
Discover why triage is now the #1 force multiplier for investigators and first responders. Uncover step-by-step rapid techniques for handling powered-on/off computers, as well as mobile devices (iOS & Android). Gain access to unmatched real-world “triage triumph” stories, simple tools and checklists you can start using today to preview, prioritize, and collect actionable evidence faster than ever.
Ever wonder what opposing experts are really looking for when they review your forensic work? Matt Danner breaks down exactly what to expect when your cases go to court and shares practical tips for preparing your analysis. You'll learn how to validate your key findings, work effectively with prosecutors or attorneys, and handle expert scrutiny with confidence. Whether you're testifying in criminal or civil cases, this presentation gives you a solid game plan for preparing your forensics work for the courtroom.
Whether we like it or not, AI is here to stay. The technologies that run AI are becoming more lightweight, and more approachable in their design and use. Add to it that the technology is now free, and practically "Anyone" can have an AI service at home that is unregulated and can be trained to do whatever that individual or organization wants.
This presentation will focus on how using free automation utilities like N8N AI can be configured to perform tasks automatically based on inputs from various sources like blogs, chats, or user input. This will provide an introduction to the artifacts generated through N8N and Ollama so that you have a starting point if a case involves the use of automated AI.
How to automatically show disparate media in a unified timeline with Truxton
Join Dave ‘Johnny Castle’ Ryberg of Truxton to learn why timelines are the most effective way to organize and present your case in a clear, compelling manner.
From CSAM detection and victim identification to automatic multilingual CSAM image description. How a combination of AI capabilities supports the investigation of crimes against children and aims to minimize the burden on the mental well-being of investigators.
The use of AI is most important and effective in the fight against child abuse. This session will highlight which AI technologies are used in investigations, their individual purpose, and their benefit for large investigative workloads.
Case studies from various investigative authorities underline their efficiency over time. The following technologies and their use will be presented and explained:
• CSAM Classifier
• Age/Gender Estimation
• Victim ID Classifiers
• Text2image and Image2image search
• CSAM Image Captioning
Description
Despite being overshadowed by social media giants, Discord is an underrated gem in the OSINT realm. With over 150 million monthly users, it hosts diverse communities ranging from gaming and tech to education, hobbies, and activism. Public servers and channels on Discord offer opportunities to uncover connections, group dynamics, and potential evidence, making it a valuable platform for OSINT investigations. This session will explore practical tips and tricks for conducting OSINT on Discord, including: Effectively navigating Discord communities; Identifying servers and channels of interest; and Gathering details about users.
Are you lost in what you should be looking for? Where the next step is and knowing how to get there? After the growth of more and more data into the realm of the digital it is time to take the data by the binary and figure out what you need. In this session, we will go through the processes used to move through the digital investigation process from the perspective of DFIR professionals and how it can be added to a digital investigations practice as a new service.
Missing out on critical evidence in the field? This presentation explores how DATAPILOT Forensics is transforming digital evidence collection by closing the critical gap between what can be captured in the lab and what is often missed in the field. We’ll examine the challenges investigators face when devices can’t be transported to a forensic lab, the real-world impact of delayed evidence acquisition, and how field-ready tools like the DATAPILOT X empower agencies to quickly and defensibly collect actionable data on-scene. Attendees will gain insight into practical strategies to strengthen investigations, protect victims, and improve case outcomes.
In today’s digital world, the ease of manipulating and sharing media files with emerging technologies has made it increasingly challenging to detect alterations and prove authenticity. Understanding the underlying structure of these files is essential to ensuring reliable evidence analysis. Join Brandon Epstein from Magnet Forensics as he provides an in-depth look at media file structure and how it encodes and decodes data, empowering investigators to evaluate file origins and integrity with confidence.
This talk explores how AI is reshaping modern investigations: where it accelerates intelligence collection, pattern-analysis, and scale, and where human judgment remains essential. We’ll break down what AI can do reliably, what it cannot, and the evidentiary lines investigators must never cross.