The opportunity to work on an APT investigation is something few Incident Responders will have been involved in. regularly Indeed, many organisations may never experience an APT. This talk will give the audience experience of an actual case, step by step, following the actions of investigators and their efforts, together with some of the tools and techniques used in a live investigations.