Clik here to view.
10 DFIR Blogs You Don’t Want to Miss
by Christa M. Miller Digital forensics is a tough job. Forensicators must evolve as rapidly as the technology does, which means being in a constant state of learning. Formal education is costly and...
View ArticleClik here to view.
InSig2 LawTech 2016 – Brussels 7th – 8th November
From the 7th – 8th of November 2016, Forensic Focus will be attending InSig2’s Law Tech Europe conference in Brussels, Belgium. If there are any topics you’d particularly like us to cover, or any...
View ArticleClik here to view.
The “I’ve Been Hacked” Defence
By: Yuri Gubanov, Oleg Afonin (C) Belkasoft Research, 2016 Abstract This article was inspired by an active discussion in one of the forensic listservs. Original post was asking on how to fight with an...
View ArticleClik here to view.
Malware Can Hide, But It Must Run
by Alissa Torres, SANS Certified Instructor It’s October, haunting season. However, in the forensics world, the hunting of evil never ends. And with Windows 10 expected to be the new normal, digital...
View ArticleClik here to view.
Touch Screen Lexicon Forensics (TextHarvester / WaitList.dat)
By Barnaby Skeggs Preamble Since the release of Windows 8, and the ‘Metro’ interface, touch screen input has been implemented in a rapidly rising number of Windows devices including Microsoft Surface...
View ArticleClik here to view.
Forensic Implications of iOS Lockdown (Pairing) Records
by ElcomSoft In recent versions of iOS, successful acquisition of a locked device is no longer a given. Multiple protection layers and Apple’s new policy on handling government requests make forensic...
View ArticleClik here to view.
Attributing a third party to a recovered (deleted) IOS SMS message
In a recent forensic case involving recovered deleted sms messages from an sms.db file on an IOS mobile device none of the mainstream mobile phone forensic software made the link between sender and...
View ArticleClik here to view.
New Federal Rule of Evidence to Directly Impact Computer Forensics and...
by John Patzakis, X1 A key amendment to US Federal Rule of Evidence 902, in the form of new subsection (14), will go into effect on December 1, 2017. This amendment will significantly impact eDiscovery...
View ArticleClik here to view.
The Ugly Side of Two-Factor Authentication
by ElcomSoft Two-factor authentication is great when it comes to securing access to someone’s account. It’s not so great when it gets in the way of accessing your account. However, in emergency...
View ArticleClik here to view.
Digital Forensic Investigational Tool For Volatile Browser Based Data...
by W.Chirath De Alwis, School of Computing, Asia Pacific Institute of Information Technology, Colombo, Sri Lanka Abstract Cyber security threats on sensitive resources have increased recently and it...
View ArticleClik here to view.
Who Is Spying On Android Users, Why Do They Do It And What Are They Doing...
If you’ve been following the news, you may already know about the many cases where companies, big and small, were caught spying on their users. It might appear that just about everyone making a phone...
View ArticleClik here to view.
Windows 10 PE for Digital Forensics
by Robin Brocks, IT Forensic Expert and Incident Responder Only a few years ago, it was a real pain creating a portable Windows on CD/ DVD or thumb drive, because the Operating System was not prepared...
View ArticleClik here to view.
Mobile Forensics Monkey Wrench: iOS 10.2 and Encryption
by Patrick Siewert, Pro Digital Forensic Consulting It’s not secret to those involved in the study and practice of mobile forensics that Apple likes to throw us curve balls with almost every new...
View ArticleClik here to view.
Unlocking The Screen of an LG Android Smartphone with AT Modem Commands
by Oleg Davydov, CTO, Oxygen Forensics Modern smartphones are much more than just a device for voice calls. Now they contain a lot of personal data – contact list, communication history, photos,...
View ArticleClik here to view.
Samsung sBrowser – Android Forensics: A Look Into The Cache Files
by Robert Craig and Michael Lambert Abstract Samsung devices are a large portion of the Android OS market. Samsung has its own Internet Browser, “sbrowser”, installed onto their devices. All web...
View ArticleClik here to view.
Asking A VPS To Image Itself
by Chris Cohen There is a Linux Virtual Private Server (VPS) that you have been tasked to collect using a forensically sound method while ensuring confidentiality, integrity and availability. You have...
View ArticleClik here to view.
Nuix Web Review & Analytics: Process, Search And Review Evidence In A Single...
by Scar de Courcier, Forensic Focus Background Nuix Web Review & Analytics (WRA) was created to enable analysts and non-technical investigators to collaborate on investigations. The tool allows a...
View ArticleClik here to view.
Unscrambling Pixels: Forensic Science Is Not Forensic Fiction
by Martino Jerian, CEO and Founder, Amped Software In every branch of forensic science, we have to fight with the falsehoods introduced by the popular series à la CSI (hence the properly called CSI...
View ArticleClik here to view.
Techno Security 2017 – Myrtle Beach 4th – 7th June
From the 4th to the 7th of June 2017, Forensic Focus will be attending the Techno Security & Digital Forensics Conference in Myrtle Beach, South Carolina, USA. If there are any topics you’d...
View ArticleClik here to view.
Cellular Provider Record Retention Periods
by Patrick Siewert, Principal Consultant, Pro Digital Forensic Consulting I just returned from a fantastic few days at the Virginia Trial Lawyers Association 2017 annual conference. I spent 3 days...
View Article