Author Archives: Forensic Focus

Magnet Forensics has a new white paper available that discusses why and how contextual content analysis works, based on a description of what child luring is (and isn’t) and what nuances to expect.

The white paper – The Technology of Child Luring: And How Machine Learning Helps Investigators to Spot it – also covers how machine learning, such as the model introduced with Magnet.AI (our industry-leading technology that analyzes conversations to recover potential child luring content for examiners to consider), overcomes the above challenges using data science.

Download the white paper now! Continue reading New White Paper – The Technology Of Child Luring: Can Machine Learning Help?→

by Larry Lieb, Managing Director, HaystackID.

The subjects we will be covering include:

• Defining When One Should Reasonably Panic
• Reasonable Triage Steps to Take in Order to Identify if There is Only Smoke or an Actual Fire
• The Importance of Defining “Win” Upfront and the Avoidance of Mission Creep
• Definition and Identification of trade secrets
• Improper Misappropriation as Defined By 18 U.S.C. § 1839(5) (A) and (6)(B)
• Restrictive Covenants and Departing Employees
• Evidence Mapping and Preservation
• Reasonable Forensic Analysis Steps
• Special Considerations Regarding Smartphone Based Evidence
• Agreed Orders To Address Privacy Concerns
• Reasonable Attorney-Client Communication Security Measures
• Civil Subpoena for Carrier Call and Text Message Records

In the first section, we will define and lay out reasonable steps one can take in the event smoke has begun to appear which could indicate fire.

Read More Continue reading An Introduction To Theft Of Trade Secrets Investigations→

A group of forensic practitioners has recently conducted a survey into the ISO 17025 scheme – its effectiveness, and its relevance for digital forensics.

The survey was conducted using Google Forms and was aimed at forensic practitioners on the front line of investigation, rather than at managers or corporations. What follows below is a summary of the results.

The majority of the respondents were investigators in law enforcement, followed by those in the private sector. Some of the private sector respondents worked alongside law enforcement on some investigations, while others did not.

Most provided a range of different services, with the most popular being hard disk and storage media imaging; analysis of stored data; phone contents preservation and analysis; server analysis; and network investigations analysis.

Read More Continue reading Challenges Of ISO 17025 Accreditation – Survey Results→

Probity Inc, a software services and systems engineering company, is pleased to announce the release of Truxton 2.0, a digital forensics platform designed to automate big data investigations.

“Truxton 2.0 is truly a revolution in digital forensics” said Probity CEO Marcus Ordonez. “By automating the loading, exploitation, and reporting of data images and logical files form any forensic tool, we’re offering an open framework that scales to handle big data, automatically extracts key entities by category, and allows multi-user collaboration.”

Initially introduced at Techno Security 2014, Truxton has become an important tool for law enforcement and other users who are looking for a way to analyze data from a wide variety of ever-changing forensic tools and sources using a single platform. Continue reading Truxton 2.0 to Premier at Techno Security and ICAC Atlanta 2017→

The Enfuse Conference, organized by Guidance Software, took place between 21st and 24th May at Caesar Palace Conference Center in Las Vegas. More than 1,500 attendees were present, coming from different fields like digital forensics, e-discovery, incid… Continue reading Enfuse 2017 – Recap→

MediaClone, Inc. is proud to announce the release of SuperImager® Plus Field Forensic Unit with Thunderbolt port – A Compact, Powerful Forensic field unit, which enables a forensic investigator, in the field, to run multiple Forensic Imaging, and is capable of capturing data from many types of storage interfaces and protocols (SAS, SATA, FC, SCSI, 1394, NVMe, USB3.1, M.2), including the latest NVMe SSD, at extremely high speed of 46GB/min, utilizing the Thunderbolt 3.0 fast port (40Gigabit/s) and the PCIE 3.0 Expansion box.

In addition, the new product can be used to run a Triage data collection application and Cellphone data extraction from multiple devices, and run complete forensic analysis applications (EnCase, FTK, Nuix).

The new product is supplied with PCIE expansion box and a small display with HDMI port.

The new product can also be operated by using optional external battery.
(See a full demo in Techno Security and ICAC conferences)

SuperImager Plus Forensic Field Unit with Thunderbolt 3.0 port Continue reading SuperImager® Plus Field Forensic Unit With Thunderbolt port – Linux/Windows Dual→

In today’s world there are basically these types of digital evidence: text, image, video, audio recording and value such as geolocation or time-stamp data. A photo plays an important role among these types of evidence, bringing not only what we can see… Continue reading Verify If A Photo Was Really Taken By A Suspected Camera – Camera Ballistics 2.0→

Oxygen Forensics, a worldwide developer and provider of advanced forensic data examination tools for mobile devices and cloud services, today announced that beginning June 1, forensic experts will be able to take the Oxygen Forensic Expert Certification 3-day training course online.

Oxygen Forensics is launching its own online portal aimed at providing a higher level of service to customers and users called the Learning Management System (LMS). Oxygen’s LMS will host the training course as well as other online materials.

The Oxygen Forensic Expert Certification course introduces advanced methods of smart device collections and data analysis. Students will examine, collect and analyze data from iOS, Android, and Windows devices, and then work to obtain physical images, understand file system formats, storage methods and evidence locations. The course also provides training and instruction on cloud storage and extraction techniques, with participants receiving a start to finish education on the use of Oxygen Forensic® Detective. Continue reading Oxygen Forensics Launches Online Certification Course June 1→

Dr Graeme Horsman from the University of Sunderland is running a survey on tool testing in digital forensics.

AccessData celebrate their 30th anniversary this month.

Guidance Software’s Enfuse conference is currently under way in Las Vegas, USA.

Bla… Continue reading Digital Forensics News May 2017→

New community allows examiners to upload and/or download artifacts made using Magnet AXIOM’s Custom Artifacts feature

Magnet Forensics has launched its Artifact Exchange. Forensics professionals can now share their Custom Artifacts with each other for use in their investigations. The team worked with the community to launch the Artifact Exchange with over 50 apps already available (and each app, as you know, can be built to recover multiple artifacts).

Here’s an overview video: https://vimeo.com/215553482 Continue reading Magnet Forensics Artifact Exchange Now Open→