Note: if the class is overfilled, then you will be wait-listed. You will be contacted should this occur.


Asia 2002 Training
01-02 October 2002
Marina Mandarin Hotel, Singapore

All course materials, lunch and two coffee breaks will be provided.
You must provide your own laptop.

Course Length: 1 day

course description
One Day Course
Tues, 01 October 2002
Tradecraft: System and Process for Digital Evidence
Ramp-Up Course
Larry Leibrock, Ph.D., Associate Dean and Technology Officer for the McCombs Business School, University of Texas
What to bring:

Just yourself!


A wide range of digital platforms, knowledge, data and evidence exist in our workday lives. These are of considerable value in administrative, civil and criminal investigations and sanction processes. The proper end-to-end system and process for caring of this evidence is central to its value in both liturgical and non-liturgical settings. Increasingly, organizations depend on systems staff to aid and perhaps conduct investigations which involve digital data–evidence.
The Course is intended to support the “white-hat” introduction to the necessary tradecraft of the emerging digital forensics profession. The course assumes a broad understanding of networks, platforms and use of systematic approaches. The course is quite intensive and covers 8 interdependent and testable knowledge domains. These domains are attached to this document.

The Examination
The end-of-course examination consists of a set of scenario-based multiple-choice questions. Each candidate may have up to 1 hour to complete the examination. The Examination is be offered the after the eight hour Ramp-Up course. Students who successfully complete the examination will be awarded a certificate of completion.

The Ramp-Up course is immersive and requires one full day of in-class focused learning. This is not a hands-on course. The learning is centered on the combination of pre-test assessments, lecture, questions, review and discussion. The course makes use of proprietary teaching materials, a reference text, binder and class notes. Students will be rigorously prepared for exam techniques and forensics skill building relevant to the final exam instrument. DIGITAL FORENSICS KNOWLEDGE DOMAINS

  • Basic Processes for Digital Forensics Investigations - Clinical Digital Forensics Frameworks.
  • Client/Server Platform toolsets
  • Cryptography and Steganography tools.
  • Cyber Crimes and the US Legal System
  • Goals and measures for digital forensic investigations
  • Initiation of Liturgical and Non-Liturgical searching and seizure
  • Network Intrusion – Internet Management and Profiling
  • Special Edge Devices and Digital photography

Course Length: 1 day


Larry Leibrock, Ph.D., is a member of the McCombs Business School – The University of Texas faculty and serves as the Associate Dean and Technology Officer for the McCombs Business School. He has held or currently holds clinical teaching and research appointments at McCombs Business School, Institute for Advanced Technology, The University of Texas Law School, Emory University, Helsinki School of Economics and Monterrey Technologica in Mexico City and Monterrey. He is a member of IEEE, ACM, Internet Society, FIRST and USENIX/SAGE. He is also a member of the Department of Defense Software Engineering Institute and a participant in the Air Force Software Technology Conference. He is the founder and CTO for eForensics LLC, a private technical services firm.

He has experience in enterprise systems support, offensive/defensive systems security measures, systems security audits, and IT deployment projects in both governmental and corporate settings.

In clinical practice, he has served as the project manager in over IT projects in several US and international sites. He holds professional certifications in IT project management, Windows“, UNIX“, systems performance, computer security and networking. He has authored papers in the topics of information systems attacks, encryption, public key infrastructures, privacy, systems survivability and systems forensics.

He has won several University teaching awards and has served as an expert in a range of legislative matters, judicial testimony, and legal disputes. Larry has served as a Special Master for a Texas Court in the areas of systems management, systems survivability, security and protection of systems mechanisms.

Larry has delivered expert digital evidence testimony at both civil and criminal trials. He has testified for the Presidential Commission for Protection of Critical Information Infrastructure and the Senate Science Committee. He recently presented forensics testimony at an invitational conference for the Executive Office of the President. He presently serves on the Texas Infrastructure Protection Advisory Committee formed by the Attorney General of Texas. He is also appointed to the Board of Directors - Texas Department of Information Resources. Larry is active in IT industry and government systems consulting projects in the areas of systems forensics, enterprise IT operations, security and incident investigations.

Black Hat Logo
(c) 1996-2007 Black Hat