DFRWS EU 2026 Workshop – Code Blue – Immersive Tabletop into Investigations Using Data from Medical Devices


Date
Tuesday, March 24th
Time
TBD
Level
Average
Capacity
10-40

About This Workshop

Globally, there is an increase in the use of systems outside of the traditional trust barrier of corporate control, with many industries having a more perimeter-less design. Since the Covid-19 global pandemic this has increased exponentially, with a rise in home office and the need for systems and devices that can be used at home through remote monitoring. The use of medical systems and devices has been revolutionised by the freedom to allow patients to be monitored in-house or remotely, lessening the burden on physical resources and the need for physical attendance at clinics and hospitals.

Medical devices, at home and in health authorities, record patient information and are used for maintaining the life and the health of patients. These same medical devices may now reside outside of the full control of the health authorities, making them more susceptible to exploitation by bad actors, but with the potential to become a rich source of information during an investigation. Such devices may not yet be identified due to a lack of awareness of their abilities, but over time an increased number of medical devices will be used in investigations.

From a forensic perspective, the sheer quantity and variety of devices provides a range of opportunities and challenges, with data artefacts often stored in unusual, or proprietary formats which require processing before they become usable, or unfamiliar data connections and systems increasing the challenge to extract any data. These are not unfamiliar challenges for any digital forensic investigator, and as with any new technology it is often the case that traditional digital forensic skillsets, and tools, can be directly translated and utilised. This workshop explores the translation of traditional skillsets, and processes, into the relatively new field of medical and healthcare device forensics. Practical analysis of case studies will allow participants to explore the forensic value of various medical devices that exist in both home and hospital settings.

The participants will be taken through a death within a healthcare establishment and explore the complex work of digital evidence in terms of medical devices and other sources of information. This will explore the various data points at the disposal of both investigators and digital forensic examiners. Whilst this is rooted in forensic science the focus is on understanding the investigative process. Participants will have the opportunity to examine data from real devices and see some of them physically.

Learning Objectives

At the end of this workshop you will be able to:

  • Understand the relevance of medical device forensics
  • Develop knowledge in transferring traditional digital forensic skills to medical devices
  • Understand acquisition approaches and limitations
  • Explore examination strategies
  • Process medical data into usable data
  • Understand the validity of evidence from medical devices

Requirements

TBD


Workshop Speakers

EB
Emlyn Butterfield
Noroff University College, Norway
VS
Veronica Schmitt
Noroff University College, Norway