BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//cfp.romhack.io//romhack-camp-2026//speaker//LLJTEP
BEGIN:VTIMEZONE
TZID:CET
BEGIN:STANDARD
DTSTART:20001029T040000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=10
TZNAME:CET
TZOFFSETFROM:+0200
TZOFFSETTO:+0100
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20000326T030000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=3
TZNAME:CEST
TZOFFSETFROM:+0100
TZOFFSETTO:+0200
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
UID:pretalx-romhack-camp-2026-GHQT3K@cfp.romhack.io
DTSTART;TZID=CET:20261003T170000
DTEND;TZID=CET:20261003T190000
DESCRIPTION:The growing reliance on heterogeneous computing environments in
  both personal and enterprise contexts has made cross-platform forensic ac
 quisition a critical competency for digital investigators. Yet the adoptio
 n of rigorous forensic workflows remains uneven\, particularly in resource
 -constrained settings where commercial tools may be inaccessible. This wor
 kshop addresses that gap by offering a structured\, hands-on introduction 
 to forensic data extraction from Windows and macOS systems using exclusive
 ly free tools.\nThe session opens with a foundational module covering the 
 core principles of digital forensics as they apply to forensic imaging: bi
 t-by-bit acquisition\, cryptographic hash verification (MD5\, SHA-256)\, w
 rite-blocking procedures\, chain of custody documentation\, and legal admi
 ssibility requirements. \nThe practical component introduces a curated too
 lkit of free acquisition and analysis solutions. Guymager is presented as 
 a reliable\, GUI-based imaging platform offering multi-format output (DD\,
  EWF/E01\, AFF)\, real-time hash calculation\, and parallel acquisition su
 pport. Fuji is introduced as a modern imager optimized for macOS environme
 nts\, particularly suited for APFS volumes and Apple Silicon hardware\, fe
 aturing automated image verification workflows. For analysis\, FTK Imager 
 is demonstrated for forensic extraction from Windows hosts\, while Autopsy
  provides participants with an open-source platform for analysis\, data re
 covery and case management.
DTSTAMP:20260921T190733Z
LOCATION:WORKSHOP 1 (Neon Genesis Exploitation)
SUMMARY:Hands-On Forensic Imaging and Data Extraction from Windows and macO
 S Using Free and Open Source Tools - Alessandro Farina
URL:https://cfp.romhack.io/romhack-camp-2026/talk/GHQT3K/
END:VEVENT
END:VCALENDAR