Now that I'm back in the office and un-buried from the work that transpired during the conference I figured it was high time to get you up to speed on this year's SANS Summit in Washington DC.

As with the last two SANS Summits, the overall event was well thought out and arranged, with many top shelf speakers and a very nice venue.

Much like Harlan I too get the most out of the one on one conversations that transpire during the breaks and break-out sessions. For me it's an excellent opportunity to speak directly with F-Response customers (both current and potential) and get a feel for what they are seeing on a daily basis.

Even though flight delays got me in late on the first day I was able to catch the always entertaining Troy Larson's (Microsoft) presentation on Windows 7. Troy highlighted many of the changes in Windows 7 for investigators, including no more INFO2 records, shadow copies, etc. While Windows XP certainly isn't going away any time soon (Microsoft recently announced 74% of business computers run XP) and is supported to 2020 (another 10 years!), Windows 7 will continue to make an impact in the private sector where hard drives are enormous and new systems are the norm.

I also was able to take in Chris Pogue's presentation on "Sniper Forensics", and whlie yes, F-Response did appear favorably in the presentation, the bulk of the preso focused on very simple tactics and processes necessary to make investigations work. I think Chris did an excellent job distilling the essense of the skills and techniques necessary, and based on the audience reactions after the preso I don't believe I was only one who felt that way. Great work Chris!

Bottom line, a big thanks again to Rob Lee and the SANS team for allowing us to come up and speak on the vendor panel, and a big thanks to all of you who stopped by to say hello at the event. Next up for F-Response is HTCIA in Atlanta, hopefully we'll see you there!

Warmest Regards,

M. Shannon, Founder

F-Response

July 13, 2010