Imagine a corporate espionage incident an employee has secretly copied sensitive company data. But it’s more than just a breach of trust, the employee is planning to use this stolen information to secure a job at a competitor, gain financial benefits, and maybe even sell proprietary insights to others. Now, it’s up to a digital forensic analyst to trace the steps, uncover what was taken, and understand how it all happened.

This session dives into the fascinating and high-stakes world of digital forensics, using FTK Imager, a powerful forensic imaging tool. We’ll walk through a simulated insider threat case to show how you can acquire, examine, and analyze digital evidence revealing what the human behind the screen thought they had covered up.

From deleted files and browser history to USB usage and file access patterns, every move leaves a trace. You’ll learn how to identify those traces and piece them together to build a narrative. Because in cybersecurity, humans keep secrets but computers don’t. We'll also highlight the psychological and strategic side of digital investigations: learning how to think like an attacker, question the data critically, and reconstruct a timeline of events that can hold up under scrutiny. Whether it's for legal action, compliance, or internal investigations, this skillset is critical.

Perfect for beginners and intermediate audiences, this session offers a practical look at how FTK Imager and forensic thinking can be applied to broader use cases like fraud, intellectual property theft, or employee misconduct. If you’re curious about how cyber sleuths work behind the scenes to crack case, this talk is for you.