Author Archives: Forensic Focus

A recording of the webinar “How To Easily Break Pincodes / Passcodes / Patterns On Locked Android Phones” is now online and available to view here.

Join the forum discussion here.
View the webinar on YouTube here.
Read a full transcript of the webinar… Continue reading Webinar: How To Break Passcodes / Patterns On Locked Android Phones→

A recording of the webinar “Deep Diving for Forensic Gold – Applications and Deleted Data” is now online and available to view here.

Join the forum discussion here.
View the webinar on YouTube here.
Read a full transcript of the webinar here. Continue reading Webinar: Deep Diving for Forensic Gold – Applications and Deleted Data→

Reviewed by K. Gus Dimitrelos CEO – Cyber Forensics 360

Opening the Oxygen Forensic Detective Dongle packaging I did not expect my forensics world of 20 years and counting to change so quickly. As a retired Secret Service agent, I began forensics in the dark ages of 1996 and would never have forecasted the growth of the mobile device market or their involvement or use in criminal enterprise. The importance of connecting device extracted data, event timelines, and linked communications with the associated web, social and cloud artifacts has re-defined the role of examiners and detectives. Welcome to the future and the new baseline of mobile device and data forensics. Oxygen Forensic Detective moved the line across from the typical data-dump style result to a more analytical and fully functioning Swiss cyber knife.

Read More Continue reading Review: Oxygen Forensic Detective From Oxygen Forensics→

Belkasoft Evidence Center 2017 v.8.0 is released! In the new version: new free standalone and built-in acquisition tool, acquiring hard and removable drives, mobile phones and cloud data, analysis of social communications and communities detection, in-… Continue reading Belkasoft Releases Evidence Center 2017 And New Free Acquisition Tool→

Welcome to this month’s round-up of recent posts to the Forensic Focus forums.

Forum members discuss the detection and analysis of steganography.

What would be your strategy for a large-scale investigation? Share your thoughts in the forum.

What do you use to extract data from Facebook?

Do you have any tips for a student who’s trying to recover data from a fire damaged hard drive?

Forum members discuss Time Capsule forensics.

Sergei Skorobogatov writes about iPhone 5c NAND mirroring.

What do you use for phone bill visualisation? Continue reading Forensic Focus Forum Round-Up→

The release of iPhone 7, iPhone 7 Plus, and iOS 10, brings new challenges for the digital forensic community. With the constant stream of new technology, BlackBag® Technologies is working hard to provide the most current software to support all the internal changes. It’s important that BlackBag® continues to support devices and systems that our customers encounter in the field.

BlackBag® is pleased to announce the release of BlackLight® 2016 R2.1 and Mobilyze 2016 R1.1. Both forensic tools have been updated to handle devices running iOS 10.

iOS 10 Support Includes:
• Direct acquisition of iOS 10 devices with backup encryption disabled
• Direct acquisition of iOS 10 devices with backup encryption enabled (password required)
• Ingestion of an iTunes backup of an iOS 10 device with backup encryption disabled (BlackLight® only)

Learn more about the new software release, which includes updated support for Windows 10 AE memory images.

Already a customer? Upgrade your software and view release notes.

To see how our software works with iOS 10, contact our Forensic Analyst and Instructor team for a fully-functional trial license, analyst@blackbagtech.com. Continue reading BlackBag’s Digital Forensic Software Now Supports iOS 10→

ElcomSoft Co. Ltd. discovers a major security weakness in iOS 10 backups, builds tool enabling quick recovery of complex passwords. Elcomsoft Phone Breaker 6.10, the company’s mobile acquisition tool, can break iOS 10 backup passwords significantly faster compared to iOS 9 passwords using a newly discovered exploit using a CPU alone. The newly discovered security weakness in iOS 10 backups potentially allows recovery speeds thousands times faster compared to password-protected iOS 9 backups. Continue reading ElcomSoft’s New Discovery Delivers Faster Forensic Access To iOS 10 Backups→

From the 7th – 8th of November 2016, Forensic Focus will be attending InSig2’s Law Tech Europe conference in Brussels, Belgium. If there are any topics you’d particularly like us to cover, or any speakers you think we should interview, please let us know in the comments.

The conference will begin with a keynote speech by Nicolas Petit, Professor of Law at the University of Liege. Petit will cover the subject of artificial intelligence tools for lawyers and their impact on the business of law.

Following the opening session, the conference will split into three streams which will allow delegates to choose presentations that are relevant to their interests. One stream will look at eDiscovery, beginning with chat messages in Bloomberg Vault and how to collect data from them.

Read More Continue reading InSig2 LawTech 2016 – Brussels 7th – 8th November→

A recording of the webinar “Discover Mobile Forensics Best Practices And Advanced Decoding With UFED Physical Analyzer” is now online and available to view here.

Join the forum discussion here.
View the webinar on YouTube here.
Read a full transcript… Continue reading Webinar: Discover Mobile Forensics Best Practices And Advanced Decoding→

Paul, tell us a bit about your role at Nuix: what does your day to day routine look like?

As part of my role, I am the ambassador, spokesperson and leader for the Nuix team in this region. I work daily with the various regional teams including sales, … Continue reading Interview With Paul Slater, Executive Director for EMEA, Nuix→