Description

Topic: Surviving Ransomware attacks

Speaker: Ilia Lvovsky - Senior Computer Forensics Investigator

Bio: Data Recovery and Digital Forensics specialist with over 15 years of experience in private and federal sectors. Sr. Specialist, Digital Forensics at Bell Canada, full-time digital forensics Instructor with BCIT – Digital Forensics and Cyber Security program and President of HTCIA West Canada chapter. Ilia took part in large-scale investigations and joint operations on the federal level as part of the Canada Revenue criminal investigations division and worked with private clients from around the globe. Specializes in civil and criminal digital forensics investigations, data recovery and extraction from severely failed digital devices.

Presentation: When ransomware attacks, and the user data is encrypted, what are the options we are faced with?
In an ideal world, a full backup of the user data affected will be available and deployed, and the systems will be restored back to being operational. In the real world, there are often no backups, or they are out of date, or they may be encrypted as well, if there was lateral movement.
In this case, if the data is needed, what are our the options?
This presentation will run through properly identifying the ransomware strain involved, and show advanced forensic and data recovery solutions to extract, decrypt and find some or all of the data affected.