Author Archives: Forensic Focus

Cinthya, tell us a bit about yourself. What’s your role, and what does a day in your life look like?

I am a U.S. Army veteran. I recently fulfilled one of my biggest achievements, which was being awarded a Bachelor’s degree in Cyber Systems from the University of New Haven and now, I am working on my Master’s degree in the same field. Thus, my days a are a little busy since I’m a full-time graduate student.

I also work for the Cyber Forensics Research and Education Group (www.UNHcFREG.com) conducting research and administering a digital forensics platform known as the Artifact Genome Project (AGP).

Read More Continue reading Interview With Cinthya Grajeda Mendez, University Of New Haven→

Jan, tell us a bit about yourself. What’s your role, and what does a typical day in your life look like?

Well, I am a research assistant of the Cyber Analysis & Defense department of the Fraunhofer FKIE in Bonn, Germany. We are doing a lot of rese… Continue reading Interview With Jan-Niclas Hilgert, Research Assistant, Fraunhofer FKIE→

by Nanni Bassetti

Sometimes during a computer forensic investigation, we need to virtualize our image disk, because it could be useful for checking or finding something of interest.

If we need to virtualize a disk image file, we can:

1. Convert the image file in VDI/VMDK
2. Use GNU/Linux and XMount

The first point is very space and time consuming, indeed if we have a disk image of 1Tb in size, we need another 1Tb to store the VDI/VMDK virtual disk for feeding our Virtual Machine and the conversion process is time wasting.

In GNU/Linux we can use XMount which is very comfortable because we don’t need to convert the image file in Virtual Disk file format, it “allows you to convert on-the-fly between multiple input and output harddisk image types. Xmount creates a virtual file system using FUSE (Filesystem in Userspace) that contains a virtual representation of the input image.“

Read More Continue reading Imm2Virtual: A Windows GUI To Virtualize Directly From Disk Image File→

Oxygen Forensics, a worldwide developer and provider of advanced forensic data examination tools for mobile devices and cloud services, today announced that Tim O’Rourke has been appointed as Vice President of Sales.

As a former engineer, O’Rourke brings a strategic and analytical approach to sales with a bias for action and problem solving. O’Rourke has a strong and demonstrated history of sales management, strategic relationships, account management, and leading teams to triple-digit revenue growth. With over 15 years of sales and leadership experience in the cybersecurity and government space, O’Rourke most recently worked for SecureWorks, a division of Dell Technologies as head of the Federal Cyber Security department. He served as VP of Sales for Nuix and Parallels, and logged sales experience with Trustwave and AccessData. Continue reading Industry Veteran Tim O’Rourke Joins Oxygen Forensics As VP Of Sales→

The DC3 Validation Report for The SuperImager Plus Desktop Gen-2 units has been just released, please contact MediaClone staff if you are interested to view the report.

The SuperImager Plus Forensic application has been used on all the SuperImager Forensic models, including the 12” Rugged Forensic Field unit, 8” Forensic Field unit, T3 8” Forensic Field unit (Thunderbolt), 7” Mini Forensic Field unit, and the Thunderbolt Forensic unit

Thank you
MediaClone Managment Continue reading DC3 Validation Report For The SuperImager Plus Desktop Gen-2 Units→

A recording of the webinar “E3: Universal Overview” is now online and available to view here.

Join the forum discussion here.
View the webinar on YouTube here.
Read a full transcript of the webinar here. Continue reading Webinar: E3: Universal Overview→

The call for papers for DFRWS EU 2018 has been extended to the 9th of October.

DFRWS invites contributions in five categories:

• Research papers
• Practitioner / industry researcher presentations
• Hands-on workshops / tutorials
• Panel discussions
• Demos and posters

RESEARCH PAPERS undergo double-blinded peer review, and the proceedings are published by Elsevier as a special issue of the Journal of Digital Investigation.

PRESENTATIONS, POSTERS, and DEMOS require a brief proposal, not a paper. These proposals undergo a light review process to select presentations of maximal interest to DFRWS attendees, and to filter out sales pitches. Presentation proposals must specify their target length from the following options: 20 minutes, 120 minutes (2 hours), 240 minutes (4 hours), or full day. Note, longer presentations and hands-on tutorials are referred to as ‘workshops’ described below. Continue reading Call For Papers: DFRWS EU 2018→

Join Magnet Forensics’ Jessica Hyde, Director of Forensics, to learn how to link common artifacts with each other and see the connections that occur between different artifacts and pieces of evidence data. Gain insight into how users interact with their content by replicating the data’s journey. Begin by looking at a file and then understand the path that the file took throughout the user’s activity – where did it originate, how was it shared, how else was it accessed, when were the times it was accessed, what else was accessed at the same time?

Date: Tuesday October 10th
Time: 9:00am EDT, repeated at 1:00pm EDT

Presenter: Jessica Hyde, Director of Forensics, Magnet Forensics

Register now Continue reading Webinar: Connecting the Dots Between Artifacts and User Activity→

Sentinel Data is Now Magnet Forensics

Magnet Forensics, a global leader in developing digital investigation software for smartphone, cloud, and computer examinations, today announces its acquisition of Sentinel Data based in Virginia and welcomes the Sentinel Data team to the company.

Sentinel Data is the creator of Atlas – a digital evidence case and lab management solution that will become part of the Magnet Forensics’ product portfolio. With the growth of digital evidence involved in cases, and the additional teams and stakeholders involved in each case, a thorough management solution that pulls together collaboration, evidence management, resource management, budgeting and more is imperative. In addition, Atlas is often used to establish procedures to comply with requirements for ISO 17025 and ASCLD-LAB accreditations. Continue reading Magnet Forensics To Add Case Management Solution To Product Portfolio→

This year at DFRWS EU, Mark Scanlon from University College Dublin presented a formal data-driven approach for prompt investigation of enterprise and internet-wide infections.

Take a look at the video and the full transcript here. Continue reading Video: Behavioral Service Graphs→