Webinar: Hyperscale Your Investigation And Intelligence Capabilities

How do you future-proof your investigative lab capabilities to handle the expanding complexity and volumes of digital evidence involved in cases today?

During this session you will hear some ideas and concepts to help tackle this ever growing problem and how intelligent, defensible workflows enable investigators to work together at a national level, giving them one view over multiple jurisdictions and multi-terabyte case files.

Learn how to:

• Automatically identify and link key artifacts and intelligence items such as named entities and digitally fingerprinted material across multiple evidence sources and historical cases
• Set up collaborative investigations involving hundreds of investigators, officers and analysts, who can all work together on cases no matter where they are located
• Prioritise and distribute key data to users of differing skill levels to maximise skill sets and resources.

Date: 14 September 2017
Time: 11am BST

Presenter: Paul Slater, Global Head of Investigations, Nuix

Register here Continue reading Webinar: Hyperscale Your Investigation And Intelligence Capabilities

Posted in Uncategorized

When No Conclusion Can Be A Conclusion

by James Zjalic

Before CCTV systems were conceived, eye-witness accounts were the only method of identifying a suspect based on their facial features. The pitfalls of this type of identification have been well documented numerous times with regard to the brain’s ability to both forget and modify what a person thinks they witnessed, due to the stress of the situation. It is not surprising therefore that estimations put this method of identification as the greatest factor in wrongful conviction proven by DNA testing.

Facial Comparison, also known as facial mapping, is a field that has seen increased prevalence over the last 20 years due to the proliferation of CCTV cameras in our towns and cities. It has the advantage of not being compromised by stress and the possibility of limiting biases as far as possible. The basic premise is to compare the face of a suspect from a CCTV recording with the face of an individual from a high-quality reference photo (such as a mugshot), to determine the possibility of them being the same person.

Read More Continue reading When No Conclusion Can Be A Conclusion

Posted in Uncategorized

Forensic Focus Forum Round-Up

Welcome to this month’s round-up of recent posts to the Forensic Focus forums.

Forum members discuss how to use Kali to recover deleted files from an SD card.

Can you suggest a good tool for cloud email forensics?

How would you extract data from a Bluetooth credit card skimmer?

Forum members discuss INDX records in the NTFS MFT.

Can you help rcwi extract data from this camera?

Jpickens is running a poll to see what members’ day-to-day tasks look like.

How large a problem is people’s overestimation of forensic techniques? Add your thoughts in the forum.

Forum members discuss the legal definitions of technical terms.

Is it possible for industry and academia to become more connected, and if so how? Share your ideas on the forum.

How long does it take for deleted data to be overwritten?

Forum members give advice on bypassing an Android PIN or pattern lock.

What do you use for analysis of Windows phones? Chime in on the forum.

Forum members suggest resources to help people get started in digital forensics. Continue reading Forensic Focus Forum Round-Up

Posted in Uncategorized