[Workshop] Intro to Digital Forensics
Tell a Friend About This EventTell a Friend
[Workshop] Intro to Digital Forensics

Introduction to digital forensics will discuss digital forensics v. e-discovery, digital forensic Investigations, chain-of-custody, numbering systems (Dec./Binary/Hex), sectors and clusters, volume boot record (VBR), file systems (FAT32).

When: 8/13/2016
From 12:00 PM until 5:00 PM
Where: University of Maryland - College Park
4146 Paint Branch Drive
College Park, Maryland  20740
United States
Presenter: Mike Westbury
Contact: Linda Bell

Online registration is closed.
« Go to Upcoming Event List  


This is a hands-on workshop where you will put into practice those things you may have read about or covered in a class. This is also a great opportunity to meet other like-minded women and to keep your skills fresh if you're a veteran! You will also earn continuing education credits towards your certification renewal.   

Level: 100             

Level 100 courses are designed for students with little to no previous IT Security experience, or no experience in the topic(s) being covered. These courses are meant to be introductory level, or provide the training for entry level certifications.

Level 200 courses are designed for students with some security experience, looking to advance or learn in new topics.

Level 300 courses are designed to offer expert level courses and training on specific topics.  Typically, a general understanding and knowledge of the topic being presented is an expected prerequisite.  

**No one is excluded from attending a course at a level higher than their current experience.  However, the course will move at the pace designed for the level of the course.

Where do I fit? See full description here

Topic Details: 

Introduction to digital forensics will discuss digital forensics v. e-discovery, digital forensic Investigations, chain-of-custody, numbering systems (Dec./Binary/Hex), sectors and clusters, volume boot record (VBR), file systems (FAT32).


Objectives – What You Will Leave Knowing

During this hands-on class you will learn:

How the computer system stores and retrieves information

How to interpret what you are seeing in a Hex editor or digital forensic software

Where the computer stores the evidence digital forensic examiners use to write their reports and conduct their analysis


Michael Westberry is currently a Deputy Special Agent in Charge at the U.S. Department of Commerce.  His certifications include Department of Defense Computer Crime Investigator (DOD CCI), Certified Information Systems Security Professional (CISSP), SANS Global Certified Forensic Analyst (GCFA), and Guidance Software’s EnCase Certified Examiner (EnCE).  He has over 30 years of military and law enforcement experience.  He has 14 years’ experience applying his technical knowledge to conduct criminal and counterintelligence investigations.  He is a retired U.S. Navy Chief Petty Officer and has served with the U.S. Customs Service, Naval Criminal Investigative Service (NCIS), U.S. Department of Commerce, and the Federal Law Enforcement Training Center (FLETC).  During his tenure as a FLETC instructor he was an instructor for the Introduction to Digital Evidence Analysis (IDEA) and Seized Computer Evidence Recovery Specialist (SCERS) training programs.       

Prerequisites – What You’re Expected to Know

Basic knowledge of how to setup and operate a Virtual Machine.



12-1: Set-up, introductions, and lunch (included)

1-5:  Training 

(Please note that this will be active workshop time - if you have not completed set-up it will be challenging to follow.)

5-6:  Wrap-up, Q&A



Laptop, 4GB RAM

Windows Operating System, Native or Virtual. (Windows 7 works best.)  


Required Tools:

HxD Hex Editor

FTK Imager

Calculator (Capable of binary and hexadecimal math)

You can still participate in this workshop as an observer if you do not have a computer available. 


Remote and Male Associate Member Participation:

Once registered, you'll receive the meeting participation info by email the day before the workshop. Expect to join 15-30 minutes prior to test your technical configurations. It’s recommended that you have a 2nd monitor to view the screen-sharing.



Full/Student/Military Member:  $100 Early bird $50 until August 5th

Associate Member and Remote Attendee: $35

Non-Member: $150 Early bird $75 until August 5th



Computer Science Instructional Center (CSIS) Bldg 
Bldg 406, Rm 1121
College Park, MD 20740 
Latitude: 38.98969032 
Longitude: -76.93605423


Free Parking. Paid Visitor Parking. Metro accessible - Spring Hill Metro Station