Digital Forensics Now
A podcast by digital forensics examiners for digital forensics examiners. Hear about the latest news in digital forensics and learn from researcher interviews with field memes sprinkled in.
Digital Forensics Now
Stomping Grounds: Digital Forensics at IACIS 2025
The Digital Forensics Now podcast brings together the core LEAPPs developer team for a candid, unscripted conversation about mobile forensics, legal challenges, and the future of their tools during the IACIS conference in Orlando.
• First time bringing together most of the LEAPPs development team in person
• Florida's new requirement for 10-day search warrant renewals creates significant challenges for long-running forensic processes
• Timestamp parameters in warrants can limit investigators' ability to discover relevant evidence
• Paladin now includes the LEAPPs integration, making powerful open-source forensic tools more accessible
• Real-world success stories of the LEAPPs helping solve cases when commercial tools failed
• Introduction of "The DFIR Investigative Mindset" book with technical editor Lee Harris
• Multiple specialized forensic training courses available at IACIS including incident response, drone, MAC and RAM forensics
Join us in two weeks for a more technical episode exploring new forensic artifacts and techniques.
I know you can't hear it. No, you cannot hear it, but still move with me. Welcome to the G-Star Forensics Now podcast. Today is May 1st. I don't know how that happened already half the year, no 325. And I'm here, accompanied by my host, the amazing, the incredible girl that stumps on the curb, that bites into her car and then forgets she bought them. The chair to my table, and when I mean chair, class chair, the one and only the fantastical Heather Charpentier. And by the way we're sitting, we're sharing one space, amazing.
Speaker 2:We're together.
Speaker 1:The music is hired up by Shane Ivers and can be found at silvermansoundcom. Yeah, I kind of messed up the volume, but it's all good. You had to say it. I fell off the curb.
Speaker 2:I didn't say it. I said you stomped it. Oh okay, you had to say it. I fell off the curb.
Speaker 1:I didn't say it. I said you stomped it oh okay, so you called yourself out. So tell us what happened with the curb. First day on my new feet yeah, you're a baby, you're a baby, so what's going on, heather? So tell the folks. You see our logo shirts. Oh yeah, what are we doing here?
Speaker 2:We are.
Speaker 3:And where are we to?
Speaker 1:begin with.
Speaker 2:We are in sunny Orlando, florida, at the IASIS conference teaching the advanced mobile device forensics class.
Speaker 1:That's right, yeah, so welcome, welcome home. Welcome to my house. Yeah, yeah, I've been living here for almost 20 years.
Speaker 2:It's not even as hot as I expected, so I'm happy. Yeah, just wait another week, yeah I know Next week will be as hot as it can be.
Speaker 1:Yeah, you might be here.
Speaker 2:I will be.
Speaker 1:I'll be here, yeah so the class is two weeks and we teach mobile forensics. It's more of a data structure class and we have a couple of folks from these structures that we're going to talk to them about the class, about their lives, what they're doing. Actually, let me put here the folks that are talking so I can follow them. And yeah, also, this is a special show, first of all because we're in the same space.
Speaker 2:We are.
Speaker 1:We don't need to use headphones, even though Heather wanted some headphones.
Speaker 2:I feel like I need them.
Speaker 1:They're missing and I'm right next to you, you can hear me, but we have no script. This is totally ad lib, totally live, right. So we got a few ideas, topics I'm going to talk about, but nothing, nothing planned. So so what we're gonna do is, um, we're gonna talk a little bit about the class and then talk about the couple of topics, and then bring other folks in just to chit chat for a little bit. So, class heather how's class going?
Speaker 2:class is awesome. We have a really really good class, whole bunch of smart students who are learning new things, but also super advanced already yeah, it's about almost a little bit.
Speaker 1:Look at that. You know what? Let me show some of you. Now you're leaving. Now you're leaving. No, I'm just kidding. I'm just kidding. I'm just kidding. We got a few folks here, but they're shy like that. They're computer experts, not movie stars.
Speaker 2:The nerds don't want to be on TV. They don't want to be on TV?
Speaker 1:They don't want. They all have their drinks ready to see us make fun of ourselves.
Speaker 2:You would think they would have brought us a drink.
Speaker 1:You know what? That's a good idea.
Speaker 2:Yeah right.
Speaker 1:You know, maybe you know they don't get picked on in class tomorrow. So, all kidding aside, the class is really good. The class is great. We got about a little bit under 50 students 38?
Speaker 2:Okay.
Speaker 1:Yeah, 38, 50. Same, thing, same thing Same thing and we cover all sorts of topics from data structures, protocol, sqlite, sqlite, json in depth. We talk about the seg Bs. The seg Bs, we talk about a little bit of malware identification for Android devices and the like. So that's what we're doing. We love it. It's my favorite event of the year yes.
Speaker 2:And I plan to continue doing so as long as the universe and my workplace allow me to.
Speaker 1:That's the thing, as long as the workplace allows us, right. So we want to talk quickly about a couple of topics that are of interest. You know, even the crowd agrees.
Speaker 2:Yep.
Speaker 1:We're being cheered right. So lately there's been this buzz around here in Florida about the course system starting to require search warrants every 10 days for every electronic item that's being seized, specifically phones. So if you seize a phone and you're working on it with your search warrant every 10 days, you need to report to that. And there has been some a little bit of a I wouldn't say uproar it's a big of a word but some comments in the community about it. So what have you been hearing, heather?
Speaker 2:Just that. It's insane that if a phone is brute forcing, you'll have to go back for a new warrant every 10 days, and I agree it is insane.
Speaker 1:Your Honor. Take note that she said that's insane. I do, I think it's insane, and she's from New York. Okay, so the Florida person didn't say anything like that okay. The one that has to do with stuff here.
Speaker 1:Well, these are your rules down here, so no well, I think that speaks to a larger point, right, Because people say, well, that's, some people might opine, oh, that's unreasonable. So every 10 days, all the overhead is going to create the backlog in regards to the different court orders that need to be processed. But I speak to a larger point of do we want to have never-ending search warrants, For example? A big complaint with possibly this process is that what if I have a phone brute forcing for a couple of months?
Speaker 2:I have one that's been brute forcing for six and a half years.
Speaker 1:Six and a half years.
Speaker 2:Yes, six and a half years.
Speaker 1:Okay, that's older than some children. I know A lot of children.
Speaker 2:I calculated it and by now I would have needed to go get 230 search warrants signed. Oh geez, at least that's rounding down.
Speaker 1:But the question is, when do you stop? When he turns 18 and goes to college? I mean, at what point do we stop brute forcing? And that's the question, right, what's the reasonable amount of oversight versus? It's not convenience, but the ability to accomplish the mission that we're set to do, which is serve the warrant right, and even speaks to the difference. Possibly we don't know yet. We're not lawyers, we're not judges. We're not lawyers, we're not judges, we're not congresspeople. But when you have a search warrant, is serving a search warrant included in the breaking into the phone, getting into the device to actually execute that search warrant? Where does execution start? Does execution start of the search warrant at the starting to get into the device or does it apply when you're already in the device? Right?
Speaker 2:We need to have these things defined.
Speaker 1:I mean we can apply all day long. For example I mean, if you cease it under a search one that's your authority then the clock should start running. Maybe, maybe not, and that's something that we need to really discuss, because folks that are technical, like us, here we are Yo. We're the ones that will inform the people that make the decisions in regards to what's technically feasible or not, and under what time frame. Right, right, because we can't claim that. So Maynard had a big argument.
Speaker 2:We did.
Speaker 1:Yes, because we can't, we can't claim that. So Maynard had a big argument. We did yes, she was really. You know, it was more of a misunderstanding because we both came from the approach of yeah, search wants to be limited, but I didn't get that part.
Speaker 2:I thought she was totally defending the unlimited time to do something, considering her phone's six years old. Yeah, no, I was totally saying that the 10 days is insane. Yeah, um, but it didn't come across the text messages in the right way, I guess yeah, and again your honor.
Speaker 1:I did not say it was insane. I got no opinions on it. Okay, now that's me so we'll see how that shakes out and again, we'll see that also, for example, with uh, timestamp, timestamps and evidence. What are we seeing on that, heather?
Speaker 2:Right, I mean. So we had a discussion today in the class about the warrants, with the timestamp parameters set to short periods of time, and what do you do?
Speaker 1:Well, for example, they tell you okay, so here's the data, but you have to filter it before looking at it for a time period From, let's say, may to December 2024. And that sounds kind of like, well, you know, things have timestamps. We should be able to do that. So what could be a problem with that?
Speaker 2:Crimes are planned maybe prior to that time period and we're missing all of that evidence. Or maybe they were talked about after the end of the time period and we miss all of that.
Speaker 1:Yeah and like, let me start the bill. He's not here now, but he was talking about. Well, different artifacts have bracketing timestamps, right, and the event might happen, you know, before your starting point.
Speaker 2:Right.
Speaker 1:And the file gets information during that time and it could stop after or before that right. So how do you capture that? Because the timestamps are not going to reflect that the activity happened within the time period, which obviously is what the court is trying to achieve, which is narrow that right, Exactly. So we talk about solutions. Education is one I floated, possibly like tank teams, for that. I mean, it's kind of like an idea that I have, and I take that from cases where you have legal documents in them and they're protected. So you have a person not involved with the investigation, filter those out and then give the rest to the person that's actually going to do the work. So maybe somebody can look at all the timestamps, identify what's relevant and then pass it over to the investigative team. Is that feasible or not? I don't know.
Speaker 2:One of Bill's big points today was just making sure you keep in contact with the prosecutors on those restraints. You want to discuss it with them and make sure it fits the case.
Speaker 1:And be proactive. If the time to tell the prosecutors, when the prosecutor says, well, we've got a search warrant, but you can only do this, well, it's a little bit too late. We weren't able to be involved in the process, so it requires a little bit of being proactive on that, if you can, and if your ADs are, if your attorneys, das, are amenable to it, right.
Speaker 2:Right, right, exactly.
Speaker 1:So enough about serious stuff. Now I'm really happy because I'm putting it on the screen. The leaves have been added to Paladin from Sumori Software. So everybody, a round of applause. We're going to take over the world of forensics and I'll be poor through the whole thing, so that's great. Yeah, oh yeah, we'll get at that. So now we're in Paladin and it's an open source tool project. Despite that, it's been adopted by a whole bunch of other forensic outfits. I think it's a point of pride to the work that some of the folks are going to meet Because, by the way, we always talk about Johan, we talk about James and John and world premiere on the podcast. We'll have him on today, so it'll be fantastic. Special guest, special guest, special guest.
Speaker 2:We have an actual live crowd right here today too. I don't think they want to be on camera, but there's a nice little crowd behind the camera, yeah.
Speaker 1:All right, so yeah, so we've seen the pictures. Paladin has the leaps there and you can run them. This is the latest release, so you want to see it there and run it from there. You can get it, and I couldn't be more stoked about it. So it's fantastic. And Johan had some conversation with Steve Wan, or maybe they can collaborate and we can collaborate on that. So that's awesome. Nice, stop looking at your phone, all right. The next thing is so we're in class, right, and somebody says, hey, could we add a little bit of a logo of my agency Because it's not serious enough. I'm like what? Yeah, yeah, some guy, some guy that might be here or not. And I'm like is the little Apple logo not serious enough for you? You know, little glasses with tape in it, I mean that's pretty serious.
Speaker 1:So they want their logo and I'm, like you know, hedging my bets. Well, I mean, I don't know, it might take months In lava. We'll redevelop it down the year. So what happens? What happens next?
Speaker 2:What happened next is there was a logo in there in about four minutes and I don't know how that was added so quickly, but I'm always saying on the podcast that you know, make sure you're updating the leaps, because they update things every 10 seconds. He literally heard can we get a logo? And it was there. What the next morning? The next morning?
Speaker 1:It was it right.
Speaker 2:Yeah, the next morning, making sure we asked the right person right here, so that's exciting.
Speaker 1:So here's how it looks. So we have here. If you go to the case data button in the interface, you'll see that the pop-up has changed. You used to have your case number and your name and the name of the agency, but now you have the logo as an add file.
Speaker 1:And it's pretty neat because it will check the type, the MIME type, of the file to make sure it's a logo, so you won't trick us, and then it will add it to your report and it will look really nice, something like this, right In honor of being in IASIS 2025 here in Orlando. So Johan put in an IASIS logo there and I love how it's formatted, kind of to the left of the case data information, so it looks very nice. We made a picture not in dark mode.
Speaker 2:Yeah, I know which I'm offended by Listen. I like the light mode, he likes the dark mode. But look, I win. I don't know my eyes are bleeding with all the brightness here.
Speaker 1:So we're happy. We're happy to have it. So thank you, Johan, for that.
Speaker 2:Before we go on, let's see what's going on. So what is Josh saying?
Speaker 1:Okay, we're both like leaning into the computer. Yeah, we're trying to figure out.
Speaker 2:See, that's what happens when you don't have a script right, see, damien agrees, damien, I'm going to find you.
Speaker 1:Damien is an expert.
Speaker 2:Dark mode for the win.
Speaker 1:An expert's expert and agrees with me. So thank you. Anybody that agrees with her, I'm not going to put them on the screen, so don't try it.
Speaker 2:Christian's writing about iLeap for his master's thesis.
Speaker 1:That's awesome, because we are going to be talking about you in our class tomorrow.
Speaker 2:Yes, tomorrow we're going to be talking about you.
Speaker 1:A little quid pro quo, without even knowing it's both ways. So yeah, we'll send you a picture of your stuff in our class and oh, you're going to be checking it out tomorrow. You'll tell people about it, All right? So I got a question about acoustic and voiceprint, but I'm really not ready to answer that question.
Speaker 2:So, josh, if you shoot us a message afterwards, maybe on LinkedIn we'll answer the question about the acoustic versus voiceprint.
Speaker 1:There you go. All right, so let's introduce a couple of the folks. Well, it will be three of them, but let's go for a couple. Let's start with, uh, start with johan, right? Yeah, so yeah, come on over. Come on over. As you can see, they're the pillars of this outfit and I when I say that, I say it because you know I'm really tiny next to him.
Speaker 2:Don't bend down, stand up I'm not even getting out of the chair because I look like yeah, I'm gonna sit down again, so I don't look as tiny as I am.
Speaker 1:I'm bigger on the inside. That's why I eat so much. All right, so so, johan, where are you coming from? Where you come from? From France, a Frenchman, yeah fantastic hey.
Speaker 5:I got a Puerto.
Speaker 3:Rican accent.
Speaker 1:What accent you have? You're even a New Yorker accent. I don't know. I got a Puerto Rican accent. What accent do you have? You don't even have a New Yorker accent. I don't know.
Speaker 2:I have a country bumpkin accent. Oh, it's beautiful. We love it.
Speaker 1:We love it. All right, johan. So what do you work for? What's your deal? I work in Switzerland. I'm a. I keep talking about war.
Speaker 5:Okay, I get you, I'm a rich from law enforcement, and now I work at the School of Criminal Justice at the University of Lausanne, switzerland.
Speaker 1:So obviously I know that already, but when we heard he was coming, I'm like dude, what am I going to teach you?
Speaker 2:Oh, my God, yeah, I totally freaked out.
Speaker 3:You teach me so much I did.
Speaker 1:Actually. So we're talking about SQLite JSON and I'm teaching that and Johan says I never heard about this before and I made the whole class clap because I couldn't believe that Johan learned something. And it's been a special class because Johan's been like the additional instructor, even though he's a student.
Speaker 3:Yeah.
Speaker 1:So I appreciate you being here. We collaborated online for a long time and actually seeing him in person makes me a lot of joy, man, so I'm like I'm not going to let you go. Either you stay here in Orlando or you take me to.
Speaker 2:Switzerland. Yeah, switzerland is where we're going.
Speaker 1:I think that's the best option right now. Yeah definitely.
Speaker 2:As I told you, I have two backpacks Yep.
Speaker 1:We're both going to fit in his backpack. I'm tiny, I'm not that tiny, all right, so let's bring James. James come over here. So again, let me stand next to James.
Speaker 2:Now I'm going to stay sitting. I'm too short.
Speaker 1:Because if Johan was tall, James is even taller.
Speaker 2:His head doesn't even fit in the screen.
Speaker 1:The good thing is that his heart is just as big as his tallness. I'm used to getting my head cut off in pictures.
Speaker 5:Well, you might have to squat or get a chair because your head is getting cut off? No, but so.
Speaker 1:The wind is blowing my hair out of the way anyway. So so, James, I'm going to say something about James. So you know James. If you've been in the world for a while, you've known James. Are you taking courses with James? Or you know his coding? He works in NK. So a legend, a living legend. So if you've been around, you know james. Now, that being said, um, you're working with us with the leaf. So are you doing with the leafs and collaborating with the community on why, why and what, what?
Speaker 5:uh, well, why, uh, I I needed some of the modules that the, the leaps had that I couldn't find in commercial tools when I was doing some litigation support cases, and so I found, I found the module was there and I was able to to get it and actually parse it and do the the job that I needed to do. And and then that, uh, that brought me back to my, uh, my roots of of digging into technical coding and stuff like that.
Speaker 1:So I was like I see some things I could add to the project and here I am, A few things like a whole new viewer that can actually deal with millions of data in a row, which we couldn't, and get away with HTML. So James is again another unofficial instructor of our class, right yeah, and ad hoc instructors.
Speaker 2:Yeah, oh, yeah, yeah.
Speaker 1:So and you know, we're going to make sure that he's here next year. So we're talking about class, about FCMs, and James says, well, maybe we can develop an exercise where we can actually have some FCM. And folks, you're listening and you don't know what FCM? It's really easy. It's really easy, come to the class, come to the class and you'll know what it is Okay. So he's like hey, how about we use FCM and use this type of model and send push notifications? Students can't get it. So I'm like okay, man, that sounds great.
Speaker 2:You know, comes out, yeah like at least six months, or maybe just in time for next year's class.
Speaker 1:So, like four hours pass. It's like, hey, you want to see how this works. I'm like dude, what the heck? No, but it worked really well and obviously we're going to implement that in class, so we appreciate it. So, yeah, you can stay too. Everybody. Stay here, john, come on over. Come on over, we'll get you in too.
Speaker 2:You're coming in, we're coming in.
Speaker 3:Yeah.
Speaker 1:Look at this you might have to get that chair and get up. Get up on the chair.
Speaker 2:You're short with us?
Speaker 1:Yeah, we're the short people here, we're the oompa loompas, so so so John, I mean. So I, I heard John at the most pertinent time. So I was looking at some LHC data in one of my phones and I found out that it disappeared. And I'm like what the heck? And I think I reached out to you first, right.
Speaker 2:I think so.
Speaker 1:Or no, it wasn't Geraldine, it might have.
Speaker 2:Yeah, no, it was Geraldine. It was Geraldine.
Speaker 1:It was definitely Geraldine.
Speaker 3:And she's like I don't know. Yeah, we got right. It's a mouthful Not good at nicking names, no, but I mean I like it, it's good.
Speaker 1:So John did some great work the first person ever to work on the ZigBee files in a forensic manner, obviously outside of Apple, and it was amazing work. It opened the door for the whole community, the whole industry, to actually get back pattern of life data. So we appreciate it, man, and knowing that because you knew him from, you know I did.
Speaker 2:John is from New York with me. So, yeah, he actually, when this whole SegV thing happened, mentioned it to me and I'm like, yeah, all right, I'll check it out with you and then, yeah, I never did. Yeah, big deal, the biggest artifacts to come out of ios in the last five ten years, yeah, yeah.
Speaker 1:So I'm like, yeah, whatever, well, I won't do that again, for sure, for sure. So. So tell us a little bit about you and and also your partner and all the good stuff I uh work for the uh putnam sheriff's office in new york.
Speaker 3:Um, I have a canine partner. I didn't bring her down because I didn't know if she'd be able to be by the pool, so she's resting in the room.
Speaker 1:Just like Heather would like to be resting too now here Going upstairs with Hannah. And what does she do? What's your daughter do?
Speaker 3:Yes, she's an electronic storage detection canine trained by Connecticut State Police. Had her for about six years now, so she's been my partner for a while. Hopefully, when it's time for retirement, we'll both maybe retire together, unless I stay longer, we'll see.
Speaker 1:It's great because we have the class pet Like literal pet, it's not the favorite student.
Speaker 2:Everybody loves her.
Speaker 1:Belly rubs, belly rubs, all around.
Speaker 2:Oh yes, Lots of hair all over the place.
Speaker 1:Which now, you know, the uniform now is black and then I have like black pants.
Speaker 1:So they're all full of dog hair, but you know what? Totally worth it. Totally worth it. So the folks you see here and to include all of us, heather, we're the main developers of the list. We're missing Kevin Pagano and and Bruno saw a lot of work on Stanso, but he's in Argentina, so I wanted to get him. And who else am I missing? All the main ones that are active now. There's so many developers, dozens of them but the main active ones, the core ones that deal with the kind of core functionalities, are pretty much here, which is awesome.
Speaker 2:Yeah, we get to kind of hang out. Yeah, absolutely so excited to meet each other, but just split up.
Speaker 1:Well, for the recorded version of this, I'll put, like Kevin, you know, ai picture somewhere floating around. He can float right here. Yeah, like seven feet tall, like you, so, yeah, so this is the crew and we're having a good time. Yeah, john was teaching variants today and my ears were bleeding, but I learned, I learned. So we touched a lot of topics and, no, it's been a good time. It's been a good time.
Speaker 5:Yeah, definitely. It's been great to sit together and talk over some of the architecture that we've been working on the internals of the LEAP tools forap tools for six months eight months now, redoing a lot of it, been doing a lot of work of processing improvement, speed improvement, reliability, error handling, a lot of that kind of stuff that makes it all together a better tool. But we're pushing forward more and more, getting close to a release of the new viewer, the Lava, and we're at the final stages of iLeap, at least to get the first release going for Lava. So we're pretty excited. We got to chat with Johan and a bunch of stuff.
Speaker 1:You can tell we're really excited about the whole thing.
Speaker 1:If you're listening to the podcast, you're missing out Exactly All right, no, and love is going to be a game changer for us and for the community because it really allows us to do way more and with way more data.
Speaker 1:One of the things that's been most satisfying for me outside of the teaching part is walking to the hallways and I'll tell the folks here. We got an investigator for New Mexico telling me hey, nice to meet you, my name is so-and-so and I had this case that I have this uh, motorola and the tooling did not work and we run on a leap and I was able to get all I needed to get my homicide indictment. And I'm like I mean, how much money is that worth? Right, there's no price that you can put on that right being able to solve cases. We got another gentleman from south africa telling about how the tool was useful to their cases. Folks that stop and say, hey, let's take a picture together, because I appreciate what you do and I'm like dude, I'm, you know, okay, it feels sometimes a little bit odd, right.
Speaker 5:But that's the price that we charge. Yeah, pretty much.
Speaker 2:Tell the story, tell the story.
Speaker 1:Tell the story. Yeah, tell us if it's useful and how, and obviously how we we make it better. And uh, and if you don't like it, it's okay. You're money by guarantee, all the money you spend on the tool, you're getting it back all zero dollars on it. So, uh, rebecca here is is in the chat.
Speaker 2:let's see what she's saying yay, can't wait to see lava. Alexis already helped me once when I couldn't get the data to load there we go in my pleasure.
Speaker 1:My pleasure always lava will definitely help with that so what else what we have to bring in? We?
Speaker 2:have lee, come on, come on, come on look this.
Speaker 1:This man is really like he was. Hey, why don't they shut? I'll be right back. And he got ready. You know, he got boom, ready to go.
Speaker 2:So introduce yourself my name is Lee Harris.
Speaker 4:I'm with the Cybersecurity Division, the city of San Marcos in Texas.
Speaker 1:By the way, from the next episode I'm going to contract him out to the intros with his voice Way better than mine.
Speaker 4:You got to talk about the book though. You've got to talk about the book though the DFIR Investigative Mindset.
Speaker 2:Yes, the book we talk about all the time.
Speaker 1:Brett's in the chat. Oh, Brett's in the chat.
Speaker 4:There you go. I was contacted by the awesome Brett Shavers I don't know two years ago and he asked me to be the technical editor of a new book that he was writing and of course, I said yes, I'm absolutely honored editor of a new book that he was. He was writing and of course, I said yes, I'm absolutely honored. We collaborated for for several months on the book uh, tossing ideas back and forth. I think we did a really, really good job together and, like I said, it truly an honor to be a part of a a wonderful book, I think for both seasoned investigators and new, uh digital forensic investigators definitely.
Speaker 2:It's a book we handed out to all of the students in the advanced mobile class because we saw the value in it and made that part of our class too.
Speaker 4:Thank, you, heather, we really appreciate it.
Speaker 2:It's excellent, it's excellent.
Speaker 1:No, we got. The first copies came out and Brad was so nice to you know, kind of dedicate it to us and sign all that. I'll do.
Speaker 2:$5 autographs, yeah there we go, there we go. We've got the crowd here. You want to autographs?
Speaker 1:Mine are free. I think they'll just pay me not to give an autograph. No, it's a great book. We got advanced copies the first ones and we read it cover to cover. I didn't write it because it's signed by the author, so I didn't want to mess it up. Oh, signed by the author, so the author, so I didn't want to.
Speaker 2:I didn't want to mess it up. I know.
Speaker 1:Yeah, I'm not going to highlight it. I bought another copy that I can actually highlight.
Speaker 4:I'll stop by tomorrow and sign it for you too there we go, there we go.
Speaker 2:Awesome.
Speaker 1:So you're going to be here next week too. I am.
Speaker 4:Yep.
Speaker 1:I'm in the cyber incident forensic great class.
Speaker 4:The instructors are phenomenal. I'm having a great time. They're all hilarious personalities. They work really well together and I'm learning a whole lot. It's especially beneficial with my transition from straight digital forensics to now cybersecurity. So, important, so important. It's perfect. I'm loving it, I'm ready to go home. You have another week. I'm a little homesick, but another week I can handle. I'm having a great time here in Orlando.
Speaker 1:That's fantastic. And, folks, I got three years to retirement from my main workplace and that's important. How do we acquire skills that are important, that serve us well now, but also in that transition over to fully private sector or your own business, whatever it is, yeah, and there's one place you can do that you know, yeah, it's an IASIS place to be.
Speaker 4:Yeah, definitely.
Speaker 2:Definitely. Where is everybody? Everybody that's in the chat. You should be here.
Speaker 1:So no, I'm glad to see Brett in the chassis here. Somebody wants them to bring along to hang out. Well, you got to be an Aces to hang out. Sorry, and we got the crowd there having their beers and sorry, their drinks, their apple juices.
Speaker 4:Their refreshing beverages.
Speaker 1:So yeah, so that's what we got here. Oh, here we go. That being said, so we offer all sorts of courses, like Lee was saying, and that course is more like an intrusion response or what's the… Correct?
Speaker 4:Yeah, it's an IR. It's the IR of the DF.
Speaker 1:The F world the.
Speaker 2:IR of the DF.
Speaker 1:Yeah, and cybercrime nowadays really requires all those skill sets, not only the forensic side, but also how did it happen, how to mitigate it, how to remediate that stuff. So I guess it gives those courses on the specialized courses. We also have courses on drone forensics. There's courses on the mobile phones. There's two of those that we give.
Speaker 4:RAM analysis. Ram analysis, that sounds really interesting. I want to take that class.
Speaker 2:Yeah, mac forensics definitely. I heard there's a new linux class as well, linux for law enforcement?
Speaker 1:yeah, they're next door. I'm trying to hear, but you know the the class chair.
Speaker 4:Yeah, the class chair doesn't let me leave ah, you're, you're busy, you're busy, I'm sorry I really like all the swag from the vendors as well, oh, oh, do you have some here?
Speaker 1:yeah, I think I so. So there's t-shirts. So digital intelligence, the ones that make the freds you know first being legendary, right, they made. I put on my linkedin a little fred made out of legos and I'm like, oh, this might be some cheap old chinese legos, oh, no, no, I mean no hate, for the chinese legos are great, but but the legit legos from where? They're? Sweden and I'm nor Norway, I don't even know they're the real Legos, the European ones, I don't know which country, denmark, denmark. I should have known. I don't know where they're from, beautiful, like a little like a collectible. So I know you all hate me on Instagram, I mean on LinkedIn, sorry oh, you know who's gonna hate you for having them what.
Speaker 1:Kevin Pagano oh yeah, he's going to want one of those.
Speaker 2:You better stop by the table and see if they have any more.
Speaker 1:They left already.
Speaker 3:Oh, they did leave oh no, bekemishacom.
Speaker 1:Yeah, says the disembodied head on my left. There we go. Now can we see you? Yeah no, for sure. So they have that. What else do you all get, Like you got?
Speaker 2:Yep and the tumblers.
Speaker 1:And the tumblers, yep. So I'm going to put those up during the day tomorrow. I was supposed to do it today but I didn't. I haven't put up the post on the Leafs on Paladin also, so I'll do that tonight. Right, right, and pretty much that's it.
Speaker 2:Yeah, we have just hanging out by the pool.
Speaker 1:So we have? Yeah, all right, so anything else for the don't know? I think we're running out of topics now. We got 20 people, everybody's quiet.
Speaker 1:I know everybody is quiet no, but all kidding aside, we appreciate you kind of hanging out with us. We'll continue to teach here. Please check out our social media to know what we're up to in regards to the class. Any questions, any comments. Some of you we didn't get to you on the chat because we don't have the resources to answer you now, but we'll get back to you, and by we I mean Heather.
Speaker 2:Yeah, just send me the message All right.
Speaker 1:So are you sure you know I'll be in the show?
Speaker 2:Yeah, come on over, guys Come on. Get over here. We have to do a parade.
Speaker 1:No go we have shy, shy people. They believe they're undercover agents, but they're not. They're just examiners, shy examiners, shy examiners. Alright, well, thank you everybody for watching. Don't worry, in two weeks we'll give you a serious program.
Speaker 1:Yes, with the artifacts and all the new stuff thanks to Johan, thanks to John, thanks to Lee, thanks to James, thanks to Heather, and thank you all for watching. So we'll be seeing each other soon and I need to find the music to say goodbye. Where is it? Where's the music? Oh, there you go. There we go. Let me see. Nobody can hear about me. See you next time, take care, you can stop now. I stop the music. You can stop now. You stopped the music. I didn't. It's too cold. See you next time. Oh, we can see a film in the back. That's amazing.
