Author Archives: Forensic Focus

Devon, tell us a bit about yourself. What’s your background, and what’s your current role?

My name is Devon Ackerman, and I am currently a Senior Director in Kroll’s Cyber Security and Investigations practice. In this role, I have leadership over an Incident Response team as well as client engagement responsibilities and hands-on investigations.

Prior to Kroll, I served as a Supervisory Special Agent and Senior Digital Forensic Examiner for the FBI. I began my career with the FBI back in 2006 and in 2008 entered the Academy to complete training as an FBI Special Agent. After graduation from the FBI Academy, I was assigned to North Carolina, or more specifically, the “Charlotte Division” of the FBI. I was initially assigned national security investigations and related matters that shared a cyber nexus, later gaining experience in cyber and DFIR matters across the board, to include traditional criminal matters.

Read More Continue reading Interview With Devon Ackerman, Senior Director, Kroll→

by Martino Jerian, CEO and Founder, Amped Software

In every branch of forensic science, we have to fight with the falsehoods introduced by the popular series à la CSI (hence the properly called CSI effect), but probably this belief is the strongest in the field of forensic image and video analysis. From endless zooming from satellite imagery, to enhancing the reflection of a reflection of a reflection, to identifying faces or fingerprints at an unbelievable pace, we very often have to explain, even to “the experts”, what is science and what is fiction.

This is complicated also by the fact that sometimes we are able to extract information from images and videos where at a first glance there is absolutely nothing visible. However, very often we can’t do anything to improve images that to that average person, don’t look that bad.

Read More Continue reading Unscrambling Pixels: Forensic Science Is Not Forensic Fiction→

by Martino Jerian, CEO and Founder, Amped Software

In every branch of forensic science, we have to fight with the falsehoods introduced by the popular series à la CSI (hence the properly called CSI effect), but probably this belief is the strongest in the field of forensic image and video analysis. From endless zooming from satellite imagery, to enhancing the reflection of a reflection of a reflection, to identifying faces or fingerprints at an unbelievable pace, we very often have to explain, even to “the experts”, what is science and what is fiction.

This is complicated also by the fact that sometimes we are able to extract information from images and videos where at a first glance there is absolutely nothing visible. However, very often we can’t do anything to improve images that to that average person, don’t look that bad.

Read More Continue reading Unscrambling Pixels: Forensic Science Is Not Forensic Fiction→

Encrypted chat apps can be some of the hardest nuts to crack — especially when someone is trying to cover their tracks in advance — but they can also be vitally important to an investigation.

Signal is a popular chat app with an emphasis on privacy. It uses encryption on in-transit data, and Magnet AXIOM now parses and carves for chat and comment data in the Signal app for Android smartphones.

In cases where the user doesn’t set a password, application data can often be recovered and decrypted. Even if decryption is not possible, group and user information, and information about messages can still be recovered, although the actual message and attachment content won’t be available. Continue reading Magnet AXIOM Now Supports Signal Forensics→

Encrypted chat apps can be some of the hardest nuts to crack — especially when someone is trying to cover their tracks in advance — but they can also be vitally important to an investigation.

Signal is a popular chat app with an emphasis on privacy. It uses encryption on in-transit data, and Magnet AXIOM now parses and carves for chat and comment data in the Signal app for Android smartphones.

In cases where the user doesn’t set a password, application data can often be recovered and decrypted. Even if decryption is not possible, group and user information, and information about messages can still be recovered, although the actual message and attachment content won’t be available. Continue reading Magnet AXIOM Now Supports Signal Forensics→

In part one of our Portable Case series, our Director of Forensics, Jessica Hyde, took a look at the features and benefits of Portable Case. She highlighted the power of real-time collaboration with multiple stakeholders and having all the feedback col… Continue reading Magnet Forensics Portable Case Part Two – How To→

The Forensic 4Cast nominations are open! Vote for your favourite hardware, software, blog, book and more.

Mari DeGrazia discusses what happens when Windows lies.

Oxygen Forensic Detective has been updated with even more features.

Michael on the Dig… Continue reading Phill Moore’s Round-Up Of This Month In Forensics→

Find your answers.
Faster, easier and with greater precision.

The enhanced XAMN Spotlight will help you attain the pivotal answers you need to make sense of your data – quick, precise, easy to use.

This allows investigators, detectives and managers to analyze and create hypotheses quicker, with greater precision and providing a higher chance of success. Continue reading The Newest Version Of XAMN Spotlight From MSAB Is Coming Soon→

New version also includes faster PhotoDNA processing, and support for KakaoTalk and Zalo.

Magnet AXIOM 1.0.10 is now available for download! Continue reading Magnet AXIOM 1.0.10 Now Lets You Decrypt iOS 10.2 iTunes Backups→

Reviewed by Azeem – Cyber Security Professional

I had no idea just how tightly BlackLight would grab onto my attention and then keep its hold. Yet, here I am. While I’ve heard positive feedback from people in the information security community regardi… Continue reading Review: BlackLight 2016 R3 From BlackBag→