MSAB NORDIC & EASTERN EUROPE WORKSHOP 2026
THE WORKSHOP
When & Where
2-3 DEC 2026
Quality Hotel Arlanda XPO
Cederströms slinga 11
195 61, Arlandastad, Sweden
The MSAB Nordic Workshop will continue its tradition in 2026. Two days dedicated to the latest developments in mobile forensics, with a clear focus on hands-on application, knowledge-sharing and methods that genuinely help in day-to-day work.
Please bring your laptop for the hands-on sessions!
Highlights:
(Complete agenda click here.)
- Analyst & forensic tracks
- Hands-on RAM extraction & analysis
- Hands-on Python crash course incl. mapping within and outside Xamn Pro for unsupported apps
- Hands-on refresher sessions on XRY Pro and XAMN Pro
- Faster and more efficient results in brute-force attack (hands-on)
- Hands-on test-point
- Handling volatile traces at the crime scene
- Contributions from the field offering different international perspectives
- Computer forensics (Detego)
- The latest developments in vehicle forensics (Berla)
- Malware & Spyware Scan on Mobile Acquisition (Jamf)
- Networking dinner
and much more
Discount-link for the hotel rooms, please click here.
Participation fee: €100 (net)
(Includes participation in the sessions, lunch and coffee breaks on both days, as well as dinner on the first day.)
Please note:
Registration closes 2 weeks before the event.
REGISTRATION
Please register here
Agenda
Subject to change.
Track A |
Track B |
Speaker |
|
Preparation – Day before |
|||
16:00-18:00 |
Laptop preparation |
||
Day 1 – 2 Dec |
|||
10:00-11:00 |
Registration + Laptop preparation |
||
11:00-11:15 |
Opening |
Mårten Blixt |
|
11:15-11:45 |
AI App decoding |
Lars Johansson |
|
11:45-12:15 |
Echoes of Espionage: Mobile Forensics Lessons from the Ukrainian Frontline |
VIP Guest Speaker from Ukrainian Authority |
|
12:30-13:30 |
Lunch |
||
13:30-15:30 |
Hands-on Python course |
Hands-on BFU bruteforcing & test points |
Alex Coley (Track A), Christoffer Kraft (Track B) |
15:30-16:00 |
Coffee Break |
||
16:00-16:30 |
The first move matters — Mobile evidence preservation in real-world operations |
Field-Trace – VIP Guest speaker from Germany |
|
16:30-17:00 |
The latest developments in vehicle forensics – Berla |
Katie Shipp, Berla |
|
17:00-17:30 |
Refresher Quiz |
||
18:00 |
Bubbles |
||
19:00 |
Networking Dinner |
||
Day 2 – 3 Dec |
|||
9:00-9:30 |
Malware detection and analysis during forensics investigation |
Harry Jenkins, Jamf |
|
9:30-10:00 |
Fighting organized crime across borders – the phygital dimension |
VIP Guest Speaker from Italian National Police |
|
10:00-10:30 |
Detego – TBD |
||
10:30-11:00 |
Coffee Break |
||
11:00-12:30 |
Missed connections: Linking people, devices, and activity through mobile data in XAMN Pro |
Hands-on RAM capture course |
Mikael Ibanez (Track A), Christoffer Kraft (Track B) |
12:30-13:30 |
Lunch |
||
13:30-14:00 |
Missed connections: Linking people, devices, and activity through mobile data in XAMN Pro |
Hands-on RAM analysis course |
Mikael Ibanez (Track A),Christoffer Kraft(Track B) |
14:00-14:30 |
CTF |
CTF |
|
14:30-14:45 |
Winner ceremony |
||