SF Bay Area DFIR Meetup January 31st

2013-01-12 16:24:44 by chort

Big news, AlienVault has agreed to play host, and they'll provide pizza and beer to boot! We also have a set date now, so without further ado, here's what to put on your calendar.

Date: Thursday, January 31st
Time: Arrive at 7PM, first presentation at 7:30PM, socializing up to 9PM
RSVP: from your work email address.
What to bring: Yourself. Please let me know ASAP if you have a short (10-20 minute) presentation you'd like to give on forensics or incident response.
Open to: Anyone doing incident response, either directly for their organization, or as a consultant. If you're in IT and part of your job involves responding to incidents, that counts.

Q: Why do I have to RSVP from work email?
A: So everyone else in attendance trusts the participants.

Q: Why are you doing this?
A: Because there's a general lack of information sharing between organizations and individuals in this field. It results in a lot of duplicated effort, and a higher level of exposure to some known-bad actors or techniques. Many companies & organizations who never considered themselves targets are realizing now that they are.

Q: Besides RSVP'ing from work email, what is being done to encourage sharing?
A: The meetup will be held under the Chatham House Rule, with some additional restrictions. Taking photos or live-blogging/tweeting/other social media is prohibited. If you plan to write a blog post with any of the information shared, please get permission from the source. I encourage everyone to share as much as they can, and for all participants to use the upmost discretion in how they handle that knowledge. It's about building trust and sharing, not about personal fame or exploitative use.

Q: I work on a big, mature IR team. What's in it for me?
A: What about presenting what you know? Be recognized for your skills/knowledge, broaden your professional network, make contacts with consulting firms, etc. Everyone has moments where it would be nice to ask "has anyone else seen this?" You never know when you might meet the one person who has. Did we mention free beer & pizza?

If you have any other questions, feel free to email me or contact me on Twitter.


at 2013-01-25 10:44:10, Nipun wrote in to say...

Hey Chort, we are having iSEC Partners Open Forum around the same time on the same date. Is there a chance we can move this to another date ? Maybe next day ? If yes, please let me know.

at 2013-01-25 19:33:36, chort wrote in to say...

Nipun, that is an unfortunate collision. It's too late at this point to reschedule, but given how much interest there's been it will probably be a regular thing. Next time?

Add a comment:




max length 1000 chars