MSAB NORDIC & EASTERN EUROPE WORKSHOP 2026

The Workshop

When & Where

2-3 DEC 2026
Quality Hotel Arlanda XPO
Cederströms slinga 11
195 61, Arlandastad, Sweden

The MSAB Nordic Workshop will continue its tradition in 2026. Two days dedicated to the latest developments in mobile forensics, with a clear focus on hands-on application, knowledge-sharing and methods that genuinely help in day-to-day work.

Please bring your laptop for the hands-on sessions!


Highlights:
(Complete agenda see below.)

  • Analyst & forensic tracks
  • Hands-on RAM extraction & analysis
  • Hands-on Python crash course incl. mapping within and outside Xamn Pro for unsupported apps
  • Hands-on refresher sessions on XRY Pro and XAMN Pro
  • Faster and more efficient results in brute-force attack (hands-on)
  • Hands-on test-point
  • Handling volatile traces at the crime scene
  • Contributions from the field offering different international perspectives
  • Computer forensics (Detego)
  • The latest developments in vehicle forensics (Berla)
  • Malware & Spyware Scan on Mobile Acquisition (Jamf)
  • Networking dinner
  • and much more

Discount-link for the hotel rooms, please click here.

Participation fee: €100 (net)
(Includes participation in the sessions, lunch and coffee breaks on both days, as well as dinner on the first day.)

Please note:
Registration closes 2 weeks before the event.

Registration

Please register here

Agenda

Subject to change.

 

Analyst Track

Acquisition Track

Speaker

Preparation – Day before

16:00-18:00

Laptop preparation

Day 1 – 2 Dec

10:00-11:00

Registration + Laptop preparation

11:00-11:15

Opening

Mårten Blixt

11:15-11:45

AI App decoding

Lars Johansson

11:45-12:15

Guest speaker – TBC

12:30-13:30

Lunch

13:30-15:30

Hands-on Python course

Hands-on BFU bruteforcing & test points

Alex Coley (Analyst Track), Christoffer Kraft (Acquisition Track)

15:30-16:00

Coffee Break

16:00-16:30

Guest speaker – TBC

16:30-17:00

The latest developments in vehicle forensics – Berla

Stephen Lewington

17:00-17:30

Refresher Quiz

18:00

Bubbles

19:00

Networking Dinner

Day 2 – 3 Dec

9:00-9:30

Malware & spyware scan on mobile acquisition – Jamf

Harry Jenkins

9:30-10:00

Guest speaker – TBC

10:00-10:30

Detego – TBD

10:30-11:00

Coffee Break

11:00-12:30

Missed connections: Linking people, devices, and activity through mobile data in XAMN Pro

Hands-on RAM capture course

Mikael Ibanez (Analyst Track), Wendy Wong (Acquisition Track)

12:30-13:30

Lunch

13:30-14:00

Missed connections: Linking people, devices, and activity through mobile data in XAMN Pro

Hands-on RAM analysis course

Mikael Ibanez (Analyst Track), Wendy Wong (Acquisition Track)

14:00-14:30

CTF

CTF

14:30-14:45

Winner ceremony