Tuesday, June 6th 2023
17:00 – 18:15 | Registration with drinks (Hall, Geopolis building) |
18:30 – 21:00 | Welcome reception (“Le Perchoir”, Vortex) |

M1 metro stations:
UNIL-Mouline (for Geopolis)
UNIL-Sorge (for the Vortex)
Wednesday, June 7th 2023
08:00 – 08:30 | Registration with coffee, tea & croissants (Hall, Geopolis building) |
08:30 – 08:45 | Opening and welcome |
08:45 – 09:30 | Horodocs, a prototype developed at the ESC to timestamp digital documents and digital pieces of evidence. David-Olivier Jaquet-Chiffelle UNIL, Switzerland |
09:30 – 10:00 | An arson caused by an Internet of Things (IoT) device Johnny Bengtsson, NFC, Sweden |
10:00 – 10:30 | Coffee break |
10:30 – 11:00 | Traces of location: introduction, limits and operational / research perspectives Thomas Souvignet, UNIL, Switzerland |
11:00 – 11:20 | The investigation of digital support in the context of pedopornography cases in Switzerland Arthur Greiner, UNIL, Switzerland |
11:20 – 11:40 | Analysis of the impact of changing mobile network infrastructure on the performance of location-based services: the MOVA project Cleo Berger, UNIL, Switzerland |
11:40 – 12:00 | Methods for Cloning Digital Traces on Smartphones: Evaluation of iTunes Encrypted Backup and TWRP Backup Cora Andreeti, UNIL, Switzerland |
12:00 – 13:00 | Lunch |
13:00 – 14:30 | Sponsors presentations 13:00 – 13:30 Riscure, Gold sponsor 13:35 – 14:05 SoftCryptum, Gold sponsor 14:10 – 14:25 Grayshift, Silver sponsor |
14:30 – 15:00 | Experiment realized in collaboration with firemen and its findings · results already presented in EAFS in Stockholm in 2022 · scientific paper accepted recently Manon Fischer (presentation by Thomas Souvignet), UNIL, Switzerland |
15:00 – 15:30 | ChatGPT: A co-pilot for digital forensic experts? Hans Henseler, NFI, Netherlands |
15:45 – 16:15 | Public transportation to Ouchy |
16:30 – 18:00 | Visit of the Olympic Museum (Ouchy, Lausanne) |
Free evening
Thursday, June 8th 2023
08:00 – 08:30 | Registration with coffee, tea & croissants (Hall, Geopolis building) |
08:30 – 10:00 __________ In parallel Room 1620 | Interactive workshop on ethical issues in cybersecurity Markus Christen (University of Zurich) and Reto Inversini (Swiss Gov-CERT) __________________________________ Workshop Aardwolf project: App Analyses and Reference Database Solution (20 people max) Abdul Boztas and Roel van Bree, NFI, Netherlands |
10:00 – 10:30 | Coffee break |
10:30 – 11:00 | Data2activity: on the relation between digital traces and activities in the physical world Jan Peter van Zandwijk, NFI, Netherlands |
11:00 – 11:30 __________ In parallel Room 1620 | Bayesian evaluation of digital location evidence: case report of a homicide investigation Aurèle Scoundrianos, Police cantonale vaudoise, Switzerland __________________________________ Law enforcement only presentation Zoltán Pusztai, Hungry |
11:30 – 12:00 __________ In parallel Room 1620 | Frauds surrounding NFTs: how bad actors proceed and how investigators can deal with the problem Arnaud Boraley, UNIL, Switzerland __________________________________ The NEMO project: Sustainable expansion of maritime observation using forensic tools Johannes Stadlinger, Arina, Switzerland |
12:00 – 13:00 | Lunch |
13:00 – 16:30 In Parallel Room 1620 | Workshop Hansken (30 people max) Hans Henseler, NFI, Netherlands |
13:00 – 14:30 In parallel Room 1612 | Scientific program (law enforcement only) . 13:00 – 13:30 Malware Analysis by AI Takahiro Kawahara, National Police Agency of Japan, Japan . 13:30 – 14:00 EU project UNCOVER on Stego and Starlight on AI for forensic science / EU AI Act Zeno Geradts, NFI, Netherlands . 14:00 – 14:30 Digital Forensic at DSTL Holly Duns, United Kingdoms |
14:30 – 15:00 | Coffee break |
15:00 – 16:00 In parallel Room 1612 | Scientific program (law enforcement only) . 15:00 – 15:30 Advanced search of CP illegal files Ricardo López Garcinuño, General Scientific Police HQ, Spain . 15:30 – 16:00 Vehicles Chris Lavoine, Gendarmerie Paris, France |
17:45 – 18:15 | Bus transfer (public transportation) from Unil |
18:30 – 19:30 | Aperitive |
19:30 – 23:00 | Gala dinner |
23:00 – 23:15 | Bus transfer (public transportation) back to Unil |
Friday, June 9th 2023
09:00 – 09:15 | Decrypting of consumer surveillance cameras (LE only) Andreas Werner, BKA KT53, Germany |
09:15 – 09:30 | Samsung Portable SSDs Encryption (LE only) Andreas Werner, BKA KT53, Germany |
09:30 – 10:00 | Business Meeting ENFSI (ENFSI members only) |
10:05 – 10:30 | Attack on TPM based harddisk encryption (LE only) Gero Gebert, Polizei Berlin, Germany |
10:30 – 10:45 | Coffee break |
10:45 – 11:15 | Mobile Cloud Forensics (LE only) Major Mustafa GUNGOR, Turkish gendarmerie, Turkey |
11:15 – 11:40 | Discussions of the results of the « Proficiency Test ESC-0001 » (LE only) Raphaël Dromelet, UNIL, Switzerland |
11:50 – 12:00 | Closing session by Zeno Geradts |
12:00 – 13:00 | Lunch, end of the meeting |