Author Archives: Forensic Focus

by Christa Miller, Magnet Forensics

An estimated 6.1 billion smartphones will be in the world by 2020, and as development of the Internet of Things—connected wearables, household appliances, vehicles, and more—continues, that number will be dwarfed by the 20.4 billion total connected devices. Understanding how these technologies work, where and how they store data, and what it all means for criminal investigations has never been more important.

Nowadays, nearly every crime involves some kind of digital evidence. As the number of connected devices and data they create increases, the numbers of staff who image, search, and analyze the evidence often remain limited. “Doing more with less” can lead to case backlogs, which can mount from months into years as digital forensics labs compete for resources with other divisions, each of which can make its own claim to public safety or corporate information security.

Read More Continue reading Making Smart Technology Decisions To Improve Case Collaboration→

Whether it’s a combination of Excel spreadsheets, Access databases, and Word docs, or even a whiteboard with yellow sticky notes, law enforcement agencies around the world have had to use a variety of band-aid solutions in their approach to case management — leading to uncertainty and potential chaos along the way.

In this webinar, we’ll explore ways to improve case management to maintain complete chain of custody for evidence inventory control, organize and control the case submission and ticketing process, gain efficiencies through methodologies and workflow, and ultimately save time and improve quality. We will walk you through Magnet ATLAS, our case and lab management solution and show how managers and investigative teams can utilize an intuitive case management system to help keep them on track and closing cases.

Register now

Dates: Tuesday, November 7th at 9:00AM EDT
Wednesday, November 8th at 1:00PM EDT

Presenters:
Jamie McQuaid, Forensics Consultant at Magnet Forensics
Kevin Harth, Solutions Consultant at Magnet Forensics Continue reading Webinar: From Intake To Court: Using Case Management To Stay On Track→

Global technology company Nuix today named Mark McCluskie as its Head of Investigations, EMEA. McCluskie joins Nuix from a long career in law-enforcement where his experience includes digital forensics and cybercrime. In his new role, McCluskie will work with Nuix’s digital forensic investigation team, key customers and the broader marketplace to provide insight on its products and direction in the large scale investigative sector. Continue reading Nuix Appoints Mark McCluskie As EMEA Head Of Investigations→

Forensics experts working on damaged media face a series of daily repeated operations. No need to mention that the slightest error in the manipulation of the fragile elements like HDD platters or heads is potentially fatal to the integrity of the media… Continue reading Data Recovery Tools: Platter Stands And Head Holders From HddSurgery→

HancomGMD launched a New Product, MD-LIVE, the live data extraction and analysis solution to help investigators with collecting the investigative evidence on the spot promptly. Find out more about new features of MD-LIVE below.

MD-LIVE

MD-LIVE is a m… Continue reading MD-LIVE: New Product For New Trend of Mobile Forensics→

New Additions to the Ecosystem Empower Law Enforcement Users to Keep Pace with Changing Needs and Trends

MSAB, the global leader in mobile forensics solutions, today announced the expansion of its Mobile Forensic Ecosystem solution with the addition of one new product and significant improvements to three existing products. These new products and enhancements will give law enforcement agencies new capabilities to:

• Quickly extract and analyze data from mobile devices;
• Transmit data to a forensic lab or headquarters location for analysis;
• Check phone data for matches with criminal or terror watch lists of suspects, and
• Assist investigators focusing on crimes against children. Continue reading MSAB Builds Out Mobile Forensic Ecosystem to Create Networks of Linked Tools→

Belkasoft updates Belkasoft Evidence Center 2018 (BEC) with multiple improvements, offering live memory analysis and malware detection for Windows 10 RAM dumps and enhancing support for Android physical acquisition. In v.8.5 Belkasoft’s digital forensic suite supports wallet apps for two of the most popular crypto-currencies Bitcoin and Ethereum, allowing experts to analyze transaction made with those crypto-currencies.

In addition, Belkasoft Evidence Center 2018 brings support for the latest mobile apps, technologies and operating systems up to date. iCloud backup downloader now supported for all versions of iOS up to and including iOS 11, while logical acquisition of Android devices now supports Android 7 Nougat. Continue reading Belkasoft Evidence Center 8.5 Offers Advanced Mobile Forensics and RAM Analysis→

Magnet AXIOM 1.2 is now available for customers to download, with new features including improved access to cloud-based data.

Jon at Ciofeca Forensics discusses the forensic examination of Apple iCloud Notes.

Paraben have launched the first IoT foren… Continue reading Digital Forensics News October 2017→

SC Media states, “This belongs in every lab doing mobile device forensics. Not only is it a solid tool. It is perfect for triage. We make this our Best Buy this month.”

SC Media, a highly rated news source for the Cyber Forensics Industry, has once again named E3:DS as Best Buy in mobile forensics along with a 5-Star review on product performance. SC Media states, “This belongs in every lab doing mobile device forensics. Not only is it a solid tool. It is perfect for triage. We make this our Best Buy this month.” Paraben Corporation, the originator of mobile technology forensics with products such as PDA & Cell Seizure in 2001, continues to lead the way into the future of forensics focusing on mobile devices and IoT (Internet of Things). Continue reading Paraben Is Back On Top With The Tool Every Digital Forensic Lab Should Have→

by Oleg Skulkin & Scar de Courcier

Before you can begin analysing evidence from a source, it first of all needs to be imaged. This describes a forensic process in which an exact copy of a drive is made. This is an important step, especially if evidence needs to be taken to court, because forensic investigators must be able to demonstrate that they have not altered the evidence in any way.

The term forensic image can refer to either a physical or a logical image. Physical images are precise replicas of the drives they reference, whereas a logical image is a copy of a certain volume within that drive. In general, logical images show what the machine’s user will have seen and dealt with, whereas physical images give a more comprehensive overview of how the device works at a higher level.

Read More Continue reading Windows Drive Acquisition→