Anti-Forensics - You are doing it wrong (Believe me, I'm an IR consultant)
Stephan Berger
Security Fest 2025 · Day 2 · Main Stage
In this insightful talk from Security Fest, Stephan Berger, an Incident Response Team Lead at InfoGuard, challenges the common assumptions surrounding anti-forensic techniques. Titled "Anti-Forensics - You are doing it wrong (Believe me, I'm an IR consultant)," Berger dismantles popular methods used by attackers to erase their tracks, revealing how often these attempts leave behind a wealth of forensic evidence for skilled defenders. The presentation serves as a critical wake-up call for red teamers and a powerful affirmation for blue teamers, demonstrating that even sophisticated adversaries frequently fail to achieve true stealth.