Accelerating DFIR: How agentic AI changes the investigation
You’ll learn how to:
- Distinguish traditional AI assistance from agentic investigation workflows
- Understand how Exterro ARMOUR for FTK uses the Model Context Protocol (MCP) to connect supported AI models to FTK Central’s forensic capabilities, with endpoint agents performing the authorized investigative tasks.
- Apply agentic AI to endpoint triage, IoC searches, user activity analysis, evidence collection, and reporting
- Preserve examiner oversight, validation, auditability, and defensibility while accelerating investigations
Reserve Your Spot for Our Upcoming Webcast
Agentic AI is changing digital forensic investigations in ways that go well beyond summarization and chat. Instead of manually moving through the repetitive steps of search, collection, triage, and reporting, investigators can now describe what they need to know and let governed AI workflows execute the supporting tasks.
In this session, we'll examine what agentic AI means for digital forensics and incident response, how AI models interact with forensic tools through MCP servers, and the areas in which the human examiner remains firmly in control.
We'll walk through real investigative workflows, show how AI can accelerate endpoint queries and evidence collection, and address the questions forensic practitioners should be asking about evidence integrity, verification, auditability, and defensibility.
The goal is not push-button forensics. It is faster investigations without sacrificing forensic rigor.
Event Speakers
Robert Bond leads product marketing for Exterro’s forensic solutions, including FTK and ARMOUR for FTK. His background spans digital forensics, cybersecurity, and enterprise technology, with previous roles at Hitachi Cyber, Guidance Software—the company behind EnCase—and Hewlett Packard. He focuses on how AI, automation, and forensic evidence help organizations investigate incidents, understand what happened, and respond with confidence. Robert holds an MBA from Indiana University and a bachelor’s degree from the University of Maryland.
Dan Gugliotta is a Solutions Engineer specializing in digital forensics and incident response at Exterro. He helps investigative teams apply FTK and Exterro’s AI-powered forensic tools to collect, analyze, and preserve digital evidence. His work focuses on practical investigative workflows, endpoint investigations, and helping examiners turn complex data into clear, defensible findings.