Anti-Cast: Forensic Investigations: What AI and Analysts Get Wrong with Markus Schober
July 8 @ 12:00 pm – 1:00 pm EDT
How many forensic reports contain conclusions that the evidence doesn’t actually support?
Join Markus Schober, founder of Blue Cape Security and former enterprise incident responder, demonstrates why both AI and human analysts draw incorrect conclusions from Windows forensic artifacts, and how proper correlation leads to more defensible investigations.
You’ll learn to evaluate artifact confidence, avoid overclaiming findings, and correlate multiple evidence sources to answer the most critical questions in DFIR — what was executed, when, and how.
If you’ve ever relied on single artifacts to support findings, this session will challenge how you think about evidence, strengthen your investigative tradecraft, and help you produce conclusions you can confidently defend.
Join us for PreShow Banter™ at 11:30 AM ET
Chat with your fellow attendees in the BHIS Discord server:
https://discord.gg/bhis
in the #🔴live-chat channel
Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com
Don’t forget to check out our Course Catalog for our upcoming free and affordable cybersecurity training!