Mikael Ibanez
14 years of Mobile Forensic Experience with MSAB. Worked as a Support Technician, Trainer, and Product Specialist as well as Product Manager with the Research and Phone Development Department at MSAB.
DataFocus 2023
21st of March | Hilton Garden Inn, Zagreb, Hrvatska
DataFocus is all about exchanging experiences
We bring together law enforcement investigators, prosecutors, judges, court expert witnesses, and other experts, and let them talk about their experiences with digital evidence and digital forensic investigations.
Since 2012
0
+
Years
Every year
0
+
Participants
Entrance
Free of charge
DataFocus conference is divided into several sections
Explore distinct sections offering insights into technical facets of evidence handling, showcase the latest products and services, and participate in interactive workshops.
Investigation section
Lecturers address technical aspects of finding, preserving, and processing digital evidence and the legal presentation of digital evidence in criminal and administrative proceedings.
Technical section
Experts provide lectures showcasing and demonstrating the latest products, services, and trends in the digital forensic field.
Workshops
At the event, our partners will conduct a series of workshops, providing participants with opportunities for personalized inquiries and live demonstrations.
Agenda
Agenda
8:30 - 9:00
REGISTRATION, WELCOME COFFEE
9:00 – 9:30
Opening ceremony (Hall: A) Goran Oparnica, Managing Director INsig2, Croatia Darko Klier, Deputy State Attorney General Davor Božinović, Ph. D., Minister, Ministry of Internal Affairs, Croatia
Daniela Trbović
Ceremony host9:30 - 10:30
Keynote presentations
Luigi Portaluri
Sales Director, Strategic Accounts, South Europe, GrayshiftKevin Chandler
Digital Forensics Specialist, GrayshiftKrešimir Hausknecht
Head of Digital Forensics, INsig210:30 - 11:00
COFFEE BREAK
11:00 - 11:30
Unexpected Artifacts in Apple Health Data
Dr. Matthew Sorell
CTO and Director, Digital Forensic Sciences Australia Pty Ltd.11:00 - 11:30
Unexpected Artifacts in Apple Health Data
Matthew Sorell
Dr. Matthew Sorell is a Senior Lecturer in Telecommunications and Multimedia Engineering and Digital Forensic Science at the University of Adelaide (Australia), Adjunct Professor of Digital Forensic Science at the Tallinn University of Technology (Estonia), Honorary Consul of the Republic of Estonian in Adelaide, and CTO and Director Digital Forensic Sciences Australia Pty Ltd. He has significant operational consulting experience in telecommunications, multimedia and device forensics, and was a Scientific Advisor to FORMOBILE-project.EU from 2019 to 2022.
11:30 - 12:00
Prosecuting Cybercrime is a Team Sport
Esther George
CEO, Cybercrime Prevention & Cyber Security, Zyber Global Centre11:30 - 12:00
Prosecuting Cybercrime is a Team Sport
Esther George
Esther George is an independent cybercrime, cybersecurity, and digital evidence consultant and the CEO and founder of the Zyber Global Centre https://zyberglobal.com. Esther is also the Editor of the Zyber Global monthly Newsletter which contains up-to-date information, news, and tips on cybercrime and cybersecurity https://zyberglobal.com/zyber-global-newsletters
Esther is the co-owner of an online cybercrime and cybersecurity training platform https://insig2-and-zyberglobal.learnworlds.com/pages/courses .
https://insig2-and-zyberglobal.learnworlds.com/pages/courses
Esther is also the lead cybercrime consultant for the Global Prosecutors E-Crime Network (GPEN), part of the International Association of Prosecutors. GPEN enables cybercrime prosecutors around the world to learn and benefit from sharing information, experiences, and strategies with each other, resulting in enhanced international cooperation. https://www.iap-association.org GPEN was initiated and designed by Esther when she was a Senior Crown Prosecutor and the Project Manager for the CPS High-Tec Crime Project based at the Crown Prosecution Service (CPS) UK.
12:00 - 12:30
Cryptocurrency – Electronic Evidence or Asset (or Both)?
Goran Supančić Dipl.iur.
Lawyer, Deputy County State Attorney, County State Attorney Office in Varaždin12:00 - 12:30
Cryptocurrency – Electronic Evidence or Asset (or Both)?
Goran Supančić
Deputy County State Attorney in Varaždin since June 1, 2020, until then Municipal State Attorney in Varaždin (since October 1, 2015) and Deputy ODO in Varaždin and Čakovec since February 4, 2009. He was a lecturer at the workshops of the Judicial Academy “Cybercrime – basic, advanced and specialist training” in 2021 and 2022.
12:30 - 13:00
The Second Additional Protocol to the Convention on Cybercrime
Kornelija Ivanušić
Judge of the Municipal Court in Velika Gorica12:30 - 13:00
The Second Additional Protocol to the Convention on Cybercrime
Kornelija Ivanušić
Judge of the Municipal Court in Velika Gorica Judge of the Criminal Law Division and the Juvenile Court of the Municipal Court of Velika Gorica. Participated in various stages of the Joint Project of the EU and CoE „CyberCrime@IPA“ (2010-2013) – Regional Cooperation in Criminal Matters – Strengthening the Capacities in Fight Against Cybercrime in the South-Eastern European Countries. Within the same Project, trained to be a trainer of the Croatian Judicial Academy and of the Regional Pilot Center established for the training of judges and public prosecutors of the South-Eastern European Countries on cybercrime and electronic evidence. Speaker at numerous international conferences and workshops (CoE, EU, UNICEF, OESC, and USA Embassy) and annual DataFocus conferences. Consultant of the Council of Europe (2017-2021) for the cybercrime projects iPROCEEDS, GLACY+, CyberCrime@EAP II, CyberCrime@EAP III, CyberCrime@Octopus, CyberSouth. Co-author of the Project “Improvement the Capacities and Judicial Functioning” co-funded by the EU – aimed to improve training programs on cybercrime for judges and public prosecutors in Croatia. Trainer and co-author of the training materials for the basic and advanced levels and e-trainings within that project. Koautor projektnih obrazovnih materijala za obuku trenera, te osnovnu i naprednu obuku polaznika hrvatskih sudaca i državnih odvjetnika kao i e-tečaja osnovne i napredne obuke, te predavač (trener) u okviru istog projekta.
13:00 - 14:00
LUNCH
14:00 - 14:30
The Importance of Digital Forensics in Criminal Investigations
Dragan Marić
Digital Forensics Police Officer, Office for Cyber Security, Ministry of Internal AffairsDavor Hrestak
Digital Forensics Police Officer, Cyber security service, Police Directorate14:00 - 14:30
The Importance of Digital Forensics in Criminal Investigations
Dragan Marić
Since 2007, he has been employed at the Ministry of Internal Affairs in the criminal police department on tasks concerning criminal intelligence analysis and digital forensics, as well as criminal investigations of cybercrimes. He went through all organizational levels in the police, from a police station, the police administration, the National Office for the Suppression of Corruption and Organised Crime, and is currently part of the team in the Office for Cyber Security at the Police Directorate. He is also the organizer of training and workshops in the field of digital forensics for police officers.
Davor Hrestak
I have been a police officer for 30 years, the last ten years in the field of digital forensics. Over the years, I have participated in numerous trainings in Croatia and abroad, including forensic tools certification courses at INSIG2. I have also been organizing courses in digital forensics for police officers.
14:30 - 15:00
Digital forensics in the police – Experience and challenges
Ante Maleš
Police Digital Forensics Officer, Criminal-intelligence Department of Split-Dalmatia Police Administration, Ministry of Interior Republic of Croatia14:30 - 15:00
Digital forensics in the police – Experience and challenges
Ante Maleš
Rich knowledge and experience in the field of IT.
An employee of the Ministry of Interior since 2015.
From 2019 digital forensic expert in the Split-Dalmatia Police Administration.
15:00 - 15:30
Mobile device search - Acquisition of data from applications that have been removed from the device
Matej Pavelić
Criminal Intelligence service, Cyber Crime department, Ministry of the Interior of the Republic of Croatia15:00 - 15:30
Mobile device search - Acquisition of data from applications that have been removed from the device
Matej Pavelić
U MUP-u od 2009. A police officer for digital forensics in the Zagreb Police Department. In the MUP since 2009.
Lecturer at national and international seminars on advanced digital (mobile and computer) forensics, OSINT (Cepol, Europol, MUP, US Department of Justice)
Lecturer (visiting) at the Polytechnic of Criminology and Public Security.
16:00 - 17:00
CLOSING CEREMONY - Tombola, Final words of the organizer, Coffee
10:30 - 11:00
BLUEBEAR Bluebear LACE Demo
Antoine Normand
CEO, Bluebear LES10:30 - 11:00
BLUEBEAR Bluebear LACE Demo
Antoine Normand
Antoine Normand took over the management of Bluebear LES a forensic software company specializing in the fight against online child exploitation in 2007. Mr. Normand is a technology and cybercrime expert. Mr. Normand delivered numerous conferences on the topic of cybercrime and visual data forensics to police agencies in Europe, Asia, and the USA.
11:30 - 12:00
CYACOMB - Rapid Digital Forensics Triage – Finding Evidence in Seconds
Ashley Page
Director | Channel | EMEA Cyacomb11:30 - 12:00
CYACOMB - Rapid Digital Forensics Triage – Finding Evidence in Seconds
Ashley Page
Ashley has spent 20 years in the Digital Forensic industry. During that time he has served for over 10 years as a Digital Forensic Investigator and seen a lot of evolution! In this session he will discuss how Cyacomb is changing the triage game, demonstrating their rapid triage tools that find data in seconds.
12:00 - 12:30
DETEGO GLOBAL - Eliminate Backlogs and Speed up Investigations with the World’s Fastest Imaging Solution, AI Analytics and Workflow Automation from Detego
Alex Kirk
Global Sales Director, Detego GlobalMatt Partridge
Technical Sales Engineer, Detego Global12:00 - 12:30
DETEGO GLOBAL - Eliminate Backlogs and Speed up Investigations with the World’s Fastest Imaging Solution, AI Analytics and Workflow Automation from Detego
Alex Kirk
Meet Alex Kirk, the driving force behind Detego’s global sales and customer management. With extensive experience in sales and a passion for technology, Alex works closely with clients to understand their unique security needs and delivers innovative solutions to enhance their investigative and case management capabilities.
Detego’s Technical Sales Engineer Matt Partridge combines deep technical expertise with practical experience conducting digital forensics investigations. Collaborating closely with clients and partners, he provides tailored solutions to help address the investigative challenges faced by customers.
Matt Partridge
Detego’s Technical Sales Engineer Matt Partridge combines deep technical expertise with practical experience conducting digital forensics investigations. Collaborating closely with clients and partners, he provides tailored solutions to help address the investigative challenges faced by customers.
12:30 – 13:00
MSAB - Empowering your XRY solution with the latest XRY Pro license
Mikael Ibanez
Technical Solution Specialist, MSAB12:30 – 13:00
MSAB - Empowering your XRY solution with the latest XRY Pro license
14:00 - 14:30
INsig2 - Crypto investigations
Savina Gruičić
Mag.ing.inf. et comm.techn., Senior consultant14:00 - 14:30
INsig2 - Crypto investigations
Savina Gruičić
Savina graduated from the Faculty of Electrical Engineering and Computing, University of Zagreb, where she obtained bachelor’s and master’s degrees in Information and Communication Technology, Information Processing profile. Savina works in INsig2 as a consultant in the digital forensics department and is a certified CHFI, EnCE, OFCI, CCO, CCPA, CCME, MCFE, CKC, CRC, CCFC examiner, where she is primarily responsible for forensic training and client education and also for support during demanding and complicated investigations. Savina was involved in equipping and setting up digital forensics laboratories. She has excellent knowledge in forensic tools and great experience with consulting in digital forensics investigations. She also teaches at the Zagreb Faculty of Applied Sciences. She has been a facilitator at the international DataFocus conferences. Through her work responsibilities, international projects, and studying abroad, she gained skills and experience in working in a multicultural and international environment.
14:30 - 15:00
OpenText - Introducing the latest OpenText EnCase Forensic and Tableau Forensic solutions including the new Tableau TD4 Imager
Stephen Gregory
EnCE Senior Principle Forensic Solutions Consultant, OpenText14:30 - 15:00
OpenText - Introducing the latest OpenText EnCase Forensic and Tableau Forensic solutions including the new Tableau TD4 Imager
Stephen Gregory
Stephen Gregory is a former Detective Police Officer from the U.K. with experience in digital forensic investigations, both with the Police and latterly in the private sector. He has been employed by Guidance Software (now OpenText) since 2002 during which time he has worked in various departments such as the Training, Professional Services and the Forensic Business Unit. In his current role at OpenText his responsibilities include advising customers and channel partners of the technical features, functionality and benefits of EnCase Forensic software and Tableau Forensic hardware solutions, as well as obtaining vital customer feedback to help develop the products to overcome the challenges presented by digital forensic investigations.
11:00 - 11:30
GRAYSHIFT - Getting the Most out of your GrayKey (*LE only *Prospects only *Only for Croatia and Slovenia)
Kevin Chandler
Digital Forensics Specialist, Grayshift11:00 . 11:30
GRAYSHIFT - Getting the Most out of your GrayKey (*LE only *Prospects only *Only for Croatia and Slovenia)
Kevin Chandler
Kevin Chandler is a Digital Forensic Specialist at Grayshift with over 26 years in Law Enforcement, specializing in digital forensics and cell site analysis. Prior to joining Grayshift, Kevin worked for the British Transport Police, in various policing roles, the last 16 years were as a Detective specializing in fraud and digital investigations.
About the lecture:
When sorting through the various debris piles in the aftermath of a serious traffic collision, a prime source of evidence that is often overlooked is that of a mobile device.
What if you suspect distracted driving?
A little-known database within iOS products can be a wealth of information and give the Digital Forensic Examiner a good idea of actual device usage to supplement your data sets.
Kevin will discuss the value of mobile device analysis to help shed some light on those vital seconds before the collision. Attendees will learn:
- How to look for alternate sources of evidence
- Why mobile device data is important
- What type of evidence is available on a mobile device for traffic collisions
11:30 - 12:30
GRAYSHIFT - The Benefits of Logical and Full File System Collections in Digital Forensics (*LE only *Proscpects and exising customers only *Only for Croatia and Slovenia)
Kevin Chandler
Digital Forensics Specialist, Grayshift11:30 - 12:30
GRAYSHIFT - The Benefits of Logical and Full File System Collections in Digital Forensics (*LE only *Proscpects and exising customers only *Only for Croatia and Slovenia)
Kevin Chandler
Kevin Chandler is a Digital Forensic Specialist at Grayshift with over 26 years in Law Enforcement, specializing in digital forensics and cell site analysis. Prior to joining Grayshift, Kevin worked for the British Transport Police, in various policing roles, the last 16 years were as a Detective specializing in fraud and digital investigations.
About the lecture:
When sorting through the various debris piles in the aftermath of a serious traffic collision, a prime source of evidence that is often overlooked is that of a mobile device.
What if you suspect distracted driving?
A little-known database within iOS products can be a wealth of information and give the Digital Forensic Examiner a good idea of actual device usage to supplement your data sets.
Kevin will discuss the value of mobile device analysis to help shed some light on those vital seconds before the collision. Attendees will learn:
- How to look for alternate sources of evidence
- Why mobile device data is important
- What type of evidence is available on a mobile device for traffic collisions
14:00 - 14:45
GRAYSHIFT - Using the GrayKey Passcode History File and Hashcat (*LE only *Existing customers only *Only for Croatia and Slovenia)
Kevin Chandler
Digital Forensics Specialist, Grayshift11:00 - 12:00
CELLEBRITE - Slow access to digital evidence is keeping you awake at night?
Ariel Karayev
Strategic Pre-Sales Expert, Cellebrite11:00 - 12:00
CELLEBRITE - Slow access to digital evidence is keeping you awake at night?
Ariel Karayev
Ariel Karayev is an experienced sales engineer with more than 20 years of experience in the networking, telecom industry & cyber security. Ariel joined Cellebrite 5 years ago and he has a deep understanding of service providers and law enforcement customer needs.
12:00 - 13:00
CELLEBRITE - Don’t miss a link: see beyond the data and connections
Ariel Karayev
Strategic Pre-Sales Expert, Cellebrite12:00 - 13:00
CELLEBRITE - Don’t miss a link: see beyond the data and connections
Ariel Karayev
Ariel Karayev is an experienced sales engineer with more than 20 years of experience in the networking, telecom industry & cyber security. Ariel joined Cellebrite 5 years ago and he has a deep understanding of service providers and law enforcement customer needs.
14:00 - 14:30
CELLEBRITE - Layer cake: adding additional layers of Digital Intelligence to your investigation
Ariel Karayev
Strategic Pre-Sales Expert, Cellebrite14:30 - 15:30
OXYGEN FORENSICS - Extracting device private areas with Oxygen Forensic® Detective
Matt Finnegan
Sales Engineer, EMEA, Oxygen Forensics14:30 - 15:30
OXYGEN FORENSICS - Extracting device private areas with Oxygen Forensic® Detective
Matt Finnegan
Matt has worked in digital forensics, and wider ‘cyber’ as a practitioner for over a decade, with a focus on Windows and mobile forensics, before joining Oxygen Forensics in January 2023. He enjoys all aspects of digital forensics and has a keen interest in reverse engineering and Android internals as well.
14:00 - 16:00
MAGNET FORENSICS - The Latest on Magnet AXIOM and the Magnet Digital Investigation Suite
Rhys Tooby
Director, Solutions Consultants, Magnet Forensics14:00 - 16:00
MAGNET FORENSICS - The Latest on Magnet AXIOM and the Magnet Digital Investigation Suite
Rhys Tooby
Rhys Tooby joined Magnet Forensics in April 2019 as a Solutions Consultant for the EMEA region. Prior to joining the team at Magnet, Rhys had a long career with South Wales Police where he was a Digital Forensic investigator for 7 years before he became the Manager of the Digital Forensics and Cyber Crime Unit for an additional 5 years. He was responsible for managing a dedicated team who provided advanced technology solutions to support the investigation of crime. Believing in Magnet’s mission, Rhys left his policing career to pursue a career working closely with other agencies to help repeat the success of his own former lab. Rhys specializes in developing solutions and custom workflows within labs with digital forensics tools and digital evidence management.
Plenary lecturers
Luigi Portauri
Director for South Europe, Grayshift, LLC
Biography
Luigi Portaluri is the Director, of South Europe at Grayshift, a US-based company, leader in digital forensics, specializing in lawful access and extraction. Luigi has extended experience in high-tech industries such as SaaS, MaaS, Incident Management Solutions, and Forensics, dealing with many government agencies. Luigi holds a degree in Economics and Management, is a contract professor for some Italian universities and holds an MBA.
Lecture:
Grayshift: Accelerate Your Investigations With GrayKey
Kevin Chandler
Digital Forensics Specialist, Grayshift, LLC
Biography
Kevin Chandler is a Digital Forensic Specialist at Grayshift with over 26 years in Law Enforcement, specializing in digital forensics and cell site analysis. Prior to joining Grayshift, Kevin worked for the British Transport Police, in various policing roles, the last 16 years were as a Detective specializing in fraud and digital investigations.
Lectures:
Getting the Most out of your GrayKey
The Benefits of Logical and Full File System Collections in Digital Forensics
Using the GrayKey Passcode History File and Hashcat
Krešimir Hausknecht
Head of Digital Forensics Department, INsig2, Croatia
Biography
After he finished his master’s degree in information and communication technologies, Krešimir started working for Ernst and Young in IT Audit department and later joined INsig2 where he started as a consultant and professional trainer. He held over 1000 hours of training all over the globe and holds a number of professional certificates in the field of digital forensics. The structure of Krešimir’s career has given him a sound understanding of security principles, IT administration and many fields of digital forensics combined with the experience of applying that knowledge in a number of different environments technically and culturally. Krešimir is the head of the Digital Forensics Department in INsig2, privately held company from Croatia. He has extensive experience in both public and private sectors where he has contributed to various programmes and clients. Krešimir’s main tasks involve team and project management, working on cases and being a professional trainer in the field of digital forensics. He is an expert in live data forensics, malware and mobile forensics. In addition, he also teaches digital forensics classes on a privately held colleague in Croatia.
Lecture:
Talino – a faster way to digital forensics
All lecturers
Alex Kirk
Ante Maleš
Ariel Karayev
Antoine Normand
Ashley Page
Matthew Sorell
Davor Hrestak
Dragan Marić
Esther George
Goran Supančić
Kevin Chandler
Kornelija Ivanušić
Matt Finnegan
Matej Pavelić
Matt Partridge
Mikael Ibanez
Rhys Tooby
Savina Gruičić
Stephen Gregory
Exhibitors
Location
Hilton Garden Inn
Radnička cesta 21, 10000, Zagreb, Croatia
DataFocus Archive
DataFocus is an international conference on digital evidence that we have been successfully organizing since 2012.
see all
