Event Calendar
Prev MonthPrev Month Next MonthNext Month
Silicon Valley Chapter Training Conference
Applied Materials
3050 Bowers Ave
Santa Clara, CA USA
Tuesday, May 07, 2019, 7:30 AM to Thursday, May 09, 2019, 5:30 PM PDT
Category: Chapter Meeting



Come and join investigators, prosecutors, and security specialists at our 3-day annual training conference.  Each day will be packed with eight hours of training.  Breakfast, lunch, and snacks will be provided on site in order to make the most or your time.  There will be plenty of free parking available.

Registration Pricing       

  • $100 – HTCIA member and Law Enforcement
  • $200 – Non-HTCIA member
  • Students - limited # of complimentary seats available

If you are Law Enforcement or a Student and not an HTCIA member, check for discount code availability before registering: email [email protected] .

Dates & Sponsors

May 7 through May 9, 2019.
7:30 AM – 5:30 PM – Breakfast will be served from 7:30 AM, and classes will begin at 8:30 AM.
Lunch and snacks are included... thanks in large part to our Sponsors:

Applied Materials | Berla Corporation | BlackBag Technologies | Digital Mountain | DriveSavers | Laxdaela Technology | Yaana Technologies

Thank you for your support!


*Subject to change*

Tuesday, May 7
8:30 AM - 9:00 AM     Opening Remarks & Welcome
9:00 AM - 10:30 AM    

Economic Espionage and Insider Threats
SSA Ben Hojnacki (FBI)

10:30 AM - 10:45 AM     break
10:45 AM - 12:15 PM     Cyber Threats: An FBI Perspective
SSA Nicolas Forst (FBI)
12:15 PM - 1:30 PM     lunch
1:30 PM - 3:30 PM    

(Lab) Building Your Raspberry Pi Network for DarkNet Investigations
Andrew Lewman

Lab will repeat on Wed (same content). Each is first come, first serve 20-person capacity.


Network Forensics with WireShark
Laura Chappell

3:30 PM - 3:45 PM     break
3:45 PM - 5:30 PM     A Mobile Case without a Mobile Device: Call Detail Records
Rene Novoa (Oxygen Forensics)


Wednesday, May 8
8:30 AM - 9:30 AM     Legal Updates (insert nondescript, multi-meaning emoji here!)
DDA Tom Flattery (Santa Clara County DA's Office)
9:30 AM - 10:30 AM     Case Study
DDA Erin West (Santa Clara County DA's Office)
10:30 AM - 10:45 AM     break
10:45 AM - 12:30 PM     Accessing and Analyzing Infotainment and Telematics Data (including Demo)
Don Brister & A.G. Speake (Berla Corporation)
12:30 PM - 1:30 PM     lunch
1:30 PM - 3:30 PM    

Case Study / Collaboration
Campbell Duncan (Campbell PD)


(Lab) Building Your Raspberry Pi Network for DarkNet Investigations
Andrew Lewman

Lab is a repeat from Tue. First come, first serve 20-person capacity.


3:30 PM - 3:45 PM     break
3:45 PM - 5:30 PM     Mobile Forensics
Derrick Donnelly (BlackBag Technologies)


Thursday, May 9
8:30 AM - 10:30 AM     Social Media Evidence & Innovations and Open Source Intelligence
Cynthia Navarro and David Dang (Digital Mountain)
10:30 AM - 10:45 AM     break
10:45 AM - 12:30 PM     DarkNet Case Studies
Andrew Lewman
12:30 PM - 1:30 PM     lunch
1:30 PM - 5:30 PM     Drone Zone (Presentation & Demo)
Det. Jose Estrada (High Tech Crimes Unit, Stockton Police Department)




(listed in order of session)

Benjamin Hojnacki is a Supervisory Special Agent (SSA) assigned to FBI San Francisco. SSA Hojnacki manages a squad responsible for investigating economic espionage and the theft of intellectual property.  SSA Hojnacki has over 11 years of service with the FBI working both counterintelligence and cyber matters.  Prior to joining the Bureau, SSA Hojnacki was a mechanical engineer in the power industry.  He holds a Master of Engineering degree from Rensselaer Polytechnic Institute and an MBA from the University of Michigan.

Nicolas Forst is a Supervisory Special Agent (SSA), FBI San Francisco Cyber Program. SSA Forst serves as the operational leader of a San Francisco FBI Cyber Squad investigating network intrusions originating overseas. SSA Forst entered on duty with the FBI in 2002. Upon completing new agents training, he was assigned to the San Francisco Field Office where he was a member of the SWAT team and investigated Counterintelligence matters. SSA Forst earned a Bachelor of Science degree from the United States Coast Guard Academy. Prior to joining the FBI, he served as a commissioned officer in the United States Coast Guard.

Laura Chappell is the Founder of Protocol Analysis Institute, Wireshark University, and Chappell University and creator of the Wireshark Certified Network Analyst certification program. Laura has been analyzing traffic since 1990 and has the grey hairs to prove it! Her customers include many of the Fortune 100 companies, local, state, federal, and international law enforcement agencies. Her blend of humor and her love of packet-level life makes for an entertaining dive into network forensics. Laura can be reached at [email protected]

Rene Novoa is currently an Account Executive at Oxygen Forensics, a company that delivers a universal forensic solution covering the widest range of mobile devices running iOS, Android, Windows Phone, BlackBerry and many others.  Previously Rene had been with Drivesavers Data Recovery for over 17 years that included conducting full forensic examination and eDiscovery projects. He has covered a range of corporate investigations, related to fraud, IP, sexual harassment etc. Rene has been involved in several organizations including HTCIA educating, presenting and sharing latest trends and capabilities of technology.

Tom Flattery has been a Deputy District Attorney in Santa Clara County for 19 years and has been prosecuting High-Tech crime since 2005.  He also works closely with the Regional Enforcement Allied Computer Team (REACT) taskforce.  Tom is also a co-chair of the California District Attorneys Association (CDAA) High Tech Committee and has organized or presented many trainings on High-Tech prosecution topics.  Through his position with CDAA, Tom was involved in negotiations with the authors of the California Electronic Communications Privacy Act which resulted in many amendments sponsored by CDAA.

Erin West is a Deputy District Attorney in Santa Clara County, California.  She has more than 20 years trial experience, with special expertise in high tech, sexual assault, and hate crimes.  Ms. West is currently assigned as the prosecutor to the REACT task force, a multi-agency high tech team made up of law enforcement from a number of local and federal agencies.  Along with the agents at REACT, Ms. West is actively engaged in the investigation and prosecution of “sim-swapping,” a new type of hacking resulting in millions of dollars of losses to both individuals and businesses.  Santa Clara County was the first nationwide to bring charges against sim-swappers and currently has five pending cases.

Don Brister served in California law enforcement for 30+ years.  As both an officer and supervisor, his duties included assignments to Narcotics, Child Exploitation / Sexual Assault, Fraud, and Hi-Tech Crime investigations.  Don has remained active in Hi-Tech related work and training, focusing on Macintosh computer acquisition and analysis, iOS device analysis, and more recently in vehicle forensic data acquisition and analysis.  As an instructor with Berla, Don is able to provide comprehensive instruction in identifying infotainment systems, acquiring data via appropriate methods then analyzing the data for use in all investigative venues.

A.G. Speake - Certified iVe Vehicle Forensics Instructor, Berla Corporation (USA) A.G Speake is an active law enforcement Detective specializing in auto theft, computer crimes, cell phone forensics as well as a Certified iVe Vehicle Forensics Instructor. His field experience has proven to be an invaluable asset, applying the latest vehicle forensic technology and data analysis tools to today's vehicle crimes. His goal is to create awareness of the investigative applications for the data stored in infotainment and telematics systems. His two hour workshop is titled 'Accessing and analyzing infotainment and telematics data to auto theft investigations'. With over 1.5 billion vehicles on the road, the need to acquire and analyze user data from vehicle systems had becomes a critical part of investigations. A vehicle’s infotainment and telematics systems are capable of capturing and storing thousands of pieces of data about its’ occupants, location and events while in operation. Whatever the investigative case at hand, the data now stored in vehicles is crucial to gaining additional information that may not be available by other means. This data within the vehicle tells a story. The story may include the number of people in the car, phone calls made by the connected device(s) or even the vehicle’s built-in phone device, internet activity of occupants before and leading up to an event, driving speeds and styles, whether or not the lights were turned on, and in some instances, interval odometer readings. Being able to identify contacts that are not yet known to the investigator, locations and routes travelled prior to and during an event of interest, and phone calls made on attached mobile devices, can all provide critical information to take an investigation to the next desired level. With days, weeks and months of data, a vehicle can hold the keys to a quick and successful resolution of an investigation. A.G.’s presentation will include: • A comprehensive overview of what data can be acquired from infotainment and telematics systems within the vehicle • An in depth discussion on the non-destructive methods to acquire and analyse it • Real life case studies at local and national levels • Discussion on the OEMs currently supported by iVe, our vehicle forensics tool kit

Campbell Duncan has been a police officer with the Campbell Police Department since 1996. During his time with Campbell PD, Campbell has worked a variety of assignments, investigations and duties. Some of these include, patrol, sexual assault investigations, the Santa Clara County S.A.F.E. Task Force, I.C.A.C. investigations, crime scene investigation, computer forensics, cellular phone investigations, call detail record analysis and geolocation investigation. Campbell was promoted to the rank of Agent in 2009 and from 2015-2018 was assigned to the Special Enforcement Division focusing mostly on residential burglaries. In 2016 Campbell was one of several people that worked with the Santa Clara County District Attorney’s Office to help to organize the Santa Clara County Burglary Investigators group, a collection of burglary investigators and district attorneys sharing information to identify and prosecute burglary crews. Campbell is currently assigned to patrol and is a member of HTCIA.

Derrick Donnelly currently serves as the Chief Scientist of BlackBag Technologies, a leading provider of multi-platform forensic software and hardware solutions.  Derrick was a regular instructor for the FBI Computer Analysis and Response Team (CART) for over 8 years and has taught numerous other international, federal, state, and local law enforcement agencies around the World. He was also asked to participate in the first working group on computer forensic training and cross border search and seizures at the United States Department of Justice.  Derrick has completed analysis and given testimony in connection with several Federal and state criminal and civil cases.  BlackBag Technologies has recently become an InQTel partner company providing a series of enhancements to its flagship product BlackLight to the US Government.

Prior to BlackBag Technologies, Mr. Donnelly spent several years leading the IT Security Department at Apple Computer, where he architected and deployed secure computer/network solutions and oversaw all technical investigations and forensic analysis.  Focusing on protecting Apple's intellectual property, he played key roles in securely implementing iTunes, Mac and the Apple online stores.  Derrick has conducted many acquisitions and analyzed data in many various types of HR, Fraud, Intellectual Property/Leak, Criminal and Civil cases.

Before joining Apple, Derrick served as a federal law enforcement officer for the Competition Bureau (Industry Canada) in Ottawa, Canada, managing the computer forensics group, and lecturing at the Canadian Police College. He also worked closely with the Royal Canadian Mounted Police, assisting on examinations of computers involved in many criminal matters.  Derrick developed and delivered the first course at the Canadian Police College dedicated to Macintosh forensics.  Derrick attended St. Francis Xavier University in Nova Scotia, Canada where he studied Information Systems.  Derrick also volunteers as a Forensic Analyst at the Santa Clara Police department and assists multiple law enforcement agencies in the Silicon Valley.

Cynthia Navarro, Project Manager of Digital Mountain, specializes in Computer Forensics and Social Media Investigations. Prior to joining Digital Mountain, she worked over the last 30 years for various Silicon Valley companies including Palm-HP, Adobe Systems, One-Red LLC as well has her own company. Cynthia has provided services for OSINT, IP licensing, fraud, business intelligence, project management, and brand protection investigations. She also provides training for law enforcement and corporate investigators. Cynthia received her Bachelor of Science in Criminal Justice from California State University Hayward. She has served as an officer numerous times with the High Technology Crime Investigation Association both locally and internationally, as well as is an active participant in the Association of Certified Fraud Examiners, Women in eDiscovery and Women in Security.

David Dang, Senior Manager, Data Discovery Solutions of Digital Mountain, has over 20 years of experience in security products, file systems and IT-enabled services. Prior to joining Digital Mountain, David was Senior Technical Support Lead of Network and Endpoint Security for Symantec. He served as a Senior Network Security Technologist for Sygate Technologies prior to Symantec's acquisition. Before Sygate, David worked in a technical operations role at Starr Technologies. He also worked over 10 years at Santa Cruz Operation (SCO), a leader in Unix-based operating systems, holding various positions in Technical Support, Engineering Services and Professional Services. He holds a Bachelor of Science Degree in Computer Engineering from the University of California at Santa Cruz. David is a member of the High Tech Crime Investigation Association (HTCIA).  

Andrew Lewman has more than 30 years of global technology experience in a variety of domains including information security, systems administration, and data management.  His interest lies in the intersection of technology and humans.  He has been a co-founder and top executive at many high-growth, start-up companies such as TechTarget, The Tor Project, Farsight Security, and DarkOwl.  He is an advisor to military and intelligence agencies in the U.S. and its Allies, having worked on SAFER Warfighter, MEMEX, SHARKSEER, CRISP, and others.

Detective Jose Estrada joined the Stockton, California Police Department in 2007. Upon completing the field training program, he was assigned to patrol where he later became a field training officer. In 2014, Det. Estrada was selected to join the Investigations Department where he was first assigned to the General Crimes Unit and subsequently to his current assignment in the High-Tech Crimes Unit. In addition, Det. Estrada is a member of the SWAT Team and the sUAS (small Unmanned Aerial Systems) Team having been certified as a Part 107 pilot (FAA commercially certified drone pilot). Prior to joining the Stockton Police Department, Estrada served as a non-commissioned officer in the United States Marine Corps.

Contact: Cynthia Navarro, President HTCIA Silicon Valley, [email protected]