Webinar Replay
Barry Bonds and Digital Forensics: Privileged Documents and Efficient Review
How does a Major League Baseball player impact how we do forensics today? We will take a trip back in time and discuss the court case US vs Comprehensive Drug Testing. Let's discuss the background, mistakes made, and what we can learn and apply to our digital investigations today. We will then take a look at how we can leverage modern forensic software to make the process of working with privileged data more efficient and more reliable.
Key Learnings:
Learn some key legal considerations when investigating systems with privileged documents.
Discuss the difference between Content and Context based data, and identify key artifacts that can give information about the case without violating privacy or privilege.
Identify some solutions available to investigators to collaborate between privileged and review teams.
Leverage automation during pre-processing to speed up the "privileged" review process.
Webinar Presenter
Justin Tolman has been working in digital forensics for 12 years. He has a bachelor’s degree in Computer Information Technology from BYU-Idaho and a master’s degree in Cyber Forensics from Purdue University. After graduating he worked as a Computer Forensic Specialist with the Ohio Bureau of Criminal Investigation.
He joined AccessData in 2015 as a senior instructor where he trained digital forensic professionals worldwide in forensic tools, concepts, and workflows. He was later promoted to Director of Training over North America. Justin has written training manuals on computer and mobile device forensics, as well as (his personal favorite) SQLite database analysis.
Justin currently works as the Forensic Subject Matter Expert and Evangelistat Exterro following the purchase of AccessData by Exterro. He is frequently presenting at conferences, on webinars, and hosts a podcast and produces YouTube content related to digital forensics and Forensic Toolkit.
Justin Tolman
Forensic Subject Matter Expert and Evangelist, Exterro
