MSAB NORDIC & EASTERN EUROPE WORKSHOP 2026
The Workshop
When & Where
2-3 DEC 2026
Quality Hotel Arlanda XPO
Cederströms slinga 11
195 61, Arlandastad, Sweden
The MSAB Nordic Workshop will continue its tradition in 2026. Two days dedicated to the latest developments in mobile forensics, with a clear focus on hands-on application, knowledge-sharing and methods that genuinely help in day-to-day work.
Please bring your laptop for the hands-on sessions!
Highlights:
(Complete agenda see below.)
- Analyst & forensic tracks
- Hands-on RAM extraction & analysis
- Hands-on Python crash course incl. mapping within and outside Xamn Pro for unsupported apps
- Hands-on refresher sessions on XRY Pro and XAMN Pro
- Faster and more efficient results in brute-force attack (hands-on)
- Hands-on test-point
- Handling volatile traces at the crime scene
- Contributions from the field offering different international perspectives
- Computer forensics (Detego)
- The latest developments in vehicle forensics (Berla)
- Malware & Spyware Scan on Mobile Acquisition (Jamf)
- Networking dinner
- and much more
Discount-link for the hotel rooms, please click here.
Participation fee: €100 (net)
(Includes participation in the sessions, lunch and coffee breaks on both days, as well as dinner on the first day.)
Please note:
Registration closes 2 weeks before the event.
Registration
Please register here
Agenda
Subject to change.
Analyst Track |
Acquisition Track |
Speaker |
|
Preparation – Day before |
|||
16:00-18:00 |
Laptop preparation |
||
Day 1 – 2 Dec |
|||
10:00-11:00 |
Registration + Laptop preparation |
||
11:00-11:15 |
Opening |
Mårten Blixt |
|
11:15-11:45 |
AI App decoding |
Lars Johansson |
|
11:45-12:15 |
Guest speaker – TBC |
||
12:30-13:30 |
Lunch |
||
13:30-15:30 |
Hands-on Python course |
Hands-on BFU bruteforcing & test points |
Alex Coley (Analyst Track), Christoffer Kraft (Acquisition Track) |
15:30-16:00 |
Coffee Break |
||
16:00-16:30 |
Guest speaker – TBC |
||
16:30-17:00 |
The latest developments in vehicle forensics – Berla |
Stephen Lewington |
|
17:00-17:30 |
Refresher Quiz |
||
18:00 |
Bubbles |
||
19:00 |
Networking Dinner |
||
Day 2 – 3 Dec |
|||
9:00-9:30 |
Malware & spyware scan on mobile acquisition – Jamf |
Harry Jenkins |
|
9:30-10:00 |
Guest speaker – TBC |
||
10:00-10:30 |
Detego – TBD |
||
10:30-11:00 |
Coffee Break |
||
11:00-12:30 |
Missed connections: Linking people, devices, and activity through mobile data in XAMN Pro |
Hands-on RAM capture course |
Mikael Ibanez (Analyst Track), Wendy Wong (Acquisition Track) |
12:30-13:30 |
Lunch |
||
13:30-14:00 |
Missed connections: Linking people, devices, and activity through mobile data in XAMN Pro |
Hands-on RAM analysis course |
Mikael Ibanez (Analyst Track), Wendy Wong (Acquisition Track) |
14:00-14:30 |
CTF |
CTF |
|
14:30-14:45 |
Winner ceremony |
||