Press Releases


MANDIANT Provides Tips for Combating the Advanced Persistent Threat at Cyber Crime Conference 2008

Jan 26, 2009
Security Experts discuss the APT, Malware Analysis and Enterprise Incident Response

 MANDIANT, an elite provider of incident response management services and solutions, announced today that the company’s Advanced Persistent Threat (APT) experts will converge at this year’s U.S. Department of Defense Cyber Crime Conference held January 26-30 in St. Louis, Missouri.

 
Nick Harbour’s presentation, “Investigating Advanced Malware Stealth and Persistence Techniques,” will take place on Wednesday, January 28 at 1:35 pm. The presentation will discuss investigative techniques used in the identification and extraction of malware.
 
Wendi Rafferty’s presentation, “Forensicating Under Fire: the Role of Traditional Forensics Within Intrusion Investigations,” will be held on Thursday, January 29, at 1:30 pm. Rafferty will cover how traditional forensic analysis is used to quickly identify the scope of compromise throughout an organization.
 
Jason Luttgens and Jed Mitten will present, “A Picture Solves A Thousand Crimes: Graphical Log File Analysis,” will be held on Thursday, January 29 at 3:30 pm. During this talk, Messrs. Luttgens and Mitten will introduce MANDIANT Highlighter™, a new tool that provides incident responders the means to analyze log files effectively and efficiently.
 
Travis Reese and David Ross will present, “Enterprise-Grade Incident Management: Responding to the Persistent Threat,” on Friday, January 30 at 10:00 am. During this presentation, they will detail the advanced persistent threat targeting our nation’s critical infrastructure and discuss various strategies for combating the APT.
 
Kelcey Tietjen’s presentation, “Complex APT Forensics Analysis: Answering the Difficult Questions,” will be held on Friday, January 30 at 10:00 am. This presentation will discuss tactical techniques to use in performing forensic analysis on systems compromised by the APT.
 
Nick Harbour is a Principal Consultant at MANDIANT and is a recognized expert in the field of malware analysis. Wendi Rafferty is the Director of Federal Services and has extensive experience with network incident response within enterprises. Jason Luttgens is also a Principal Consultant with over nine years experience in incident response and developing computer crime investigative technologies. Jed Mitten is a Senior Consultant and specializes in Web and wireless penetration testing. Travis Reese is the Chief Operating Officer at MANDIANT with over 16 years experience providing technical services focused on mission-critical national security programs for the national intelligence community, DoD and numerous other federal agencies. David Ross is a Principal Consultant with extensive experience performing incident response and reverse engineering software. Kelcey Tietjen is a Consultant specializing in incident response and digital forensics.
 
This year’s U.S. Department of Defense Cyber Crime Conference 2009 will be held January 26-30, 2009, at the Renaissance Grand Hotel in St. Louis, Missouri. For more information on this event, visit: http://www.dodcybercrime.com/9CC/. 
 

About MANDIANT

MANDIANT is an information security company providing products, professional services and education to Fortune 500 companies, financial institutions, government agencies, domestic and foreign police departments and several of the U.S.’s leading law firms. MANDIANT security consultants are acknowledged experts in incident response, computer forensics, network security and application security. MANDIANT is a VISA approved Qualified Incident Response Assessor. In addition to authoring seven books and numerous articles about computer forensics, incident response and rootkits, MANDIANT’s consultants have been featured on news programs including CBS’s 60 Minutes, CNN’s Talkback Live, NBC News and FOX News. MANDIANT operates offices in the Washington, DC area, New York City and Los Angeles. To learn more about MANDIANT, visit http://www.mandiant.com, or read the company blog, M-Unition, at http://blog.mandiant.com.