This session empowers attendees to revolutionize their approach to solving cases and incidents through innovative strategies and creative problem-solving. Participants will learn how to cultivate a critical-thinking-driven investigative mindset—embodying the principle of "one mind, any problem"—that enables DFIR professionals to tackle any matter, from complex cyber incidents to traditional crimes involving digital evidence. Unlike data analysts who merely interpret data, true DFIR investigators leverage adaptability and strategic innovation to solve problems, uncover hidden patterns, and build compelling cases. Attendees will gain practical tools to develop this mindset, transforming vast data into actionable evidence and driving investigations with ingenuity and impactful results, positioning themselves as leaders capable of navigating the full spectrum of DFIR challenges.
DFIR Training
Brett Shavers is a respected digital forensics and incident response (DFIR) consultant known for ‘placing suspects behind the keyboard’. As a former law enforcement officer, he built digital forensic units and led complex cases involving organized crime, cybercriminals, and high-stakes digital threats, including operating as an international undercover operative targeting human trafficking, arms trafficking, drug trafficking, and national security matters.
An award-winning author and speaker, Brett shares his expertise through the Placing the Suspect Behind the Keyboard series and training programs, providing investigators with practical strategies, critical thinking skills, and adaptable methodologies. His commitment to advancing the DFIR field inspires professionals to adopt an investigative mindset that drives real-world results.
Subject Matter Expert
Justin Tolman has been working in digital forensics for 12 years. He has a bachelor’s degree in Computer Information Technology from BYU-Idaho and a master’s degree in Cyber Forensics from Purdue University. After graduating he worked as a Computer Forensic Specialist with the Ohio Bureau of Criminal Investigation. He joined AccessData in 2015 as a senior instructor where he trained digital forensic professionals worldwide in forensic tools, concepts, and workflows. He was later promoted to Director of Training over North America. Justin has written training manuals on computer and mobile device forensics, as well as (his personal favorite) SQLite database analysis. Justin currently works as the Forensic Subject Matter Expert and Evangelist at Exterro following the purchase of AccessData by Exterro. He is frequently presenting at conferences, on webinars, and hosts a podcast and produces YouTube content related to digital forensics and Forensic Toolkit.