With the rising cyber threats and increasing sophistication of new cyber attacks, an effective cyber forensics program is required to every organization. This talk will help professionals take a deep dive into the expert cyber forensics domain by learning from the real world forensics assignments carried out by the speaker(s). Talk includes different aspects of forensics including but not limited to computer forensics, network forensics, application forensics followed by real world case studies. Computer Forensic – Mining Digital evidence in Microsoft OS 1. Registry Forensic 2. Windows Search Database Forensic 3. Understanding SIN and FIN attribute of NTFS file system Network Forensic 1. Overall approach for understanding and investigating network intrusion 2. Intelligent approach towards log analysis 3. Writing effective filters in Wireshark/Tcpdump to capture the right packet. Application Forensic 1. Sandbox analysis 2. Using Sysinternal tools to understand the behavior of potential malware 3. Masking bits/XORing the file for file analysis Case Study 1 Case Study 2