SSD and eMMC Forensics 2016 – Part 3

What Has Changed in 2016 in the Way SSD Drives Self-Destruct Evidence: Demystifying eMMC, M.2, NVMe, and PCI-E.

by Yuri Gubanov & Oleg Afonin
© Belkasoft Research 2016

In the previous part of the article, we talked about eMMC storages and external SSDs. We also mentioned TRIM when talking about trimming behavior of eMMC. We will talk a bit more about TRIM this time and then move on to some real-life cases.

More about TRIM: Checking TRIM Support

There are several levels of TRIM support, all of which are worth checking.

– TRIM support by the SSD drive itself.
– Whether TRIM is enabled and active on a given system/configuration.
– Whether TRIM is correctly implemented by the SSD controller.
– Whether the SSD supports and implements DRAT and DZAT.
– Checking whether a particular SSD drive advertises TRIM support is as easy as reviewing its S.M.A.R.T. output, using the manufacturer’s bundled tool (e.g. SSD Toolbox, Samsung Magician and similar) or using a third-party tool such as CrystalDiskInfo.

Read More Continue reading SSD and eMMC Forensics 2016 – Part 3

Posted in Uncategorized

Oxygen Forensic Detective Helps Ocala Police To Extract Critical Evidence

About Ocala Police Department

The Ocala Police Department, located in Ocala, Marion County, Florida along with the sheriff’s department have approximately 250 sworn officers in service who proudly serve the over 300,000 residents. Much like the rest of the world, Ocala and Marion County have had to keep with the changing landscape of today’s investigations. Our world is digital, with data held on computers, networks and mobile devices. This data, more often than not, is critical to Ocala and Marion County’s law enforcement officers who strive to protect and serve to protect the lives of the many residents.

In an effort to keep ahead of the ever-increasing technical aspects of today’s crimes the law enforcement of Marion County, rely on specialized tools and experts. These experts assist with various investigations from computer investigations, electronic surveillance, and mobile forensic collection and analysis. Having the best software to offer the community innovative support for today’s smart devices was one of the reasons the Ocala Police started using Oxygen Forensic Detective. Continue reading Oxygen Forensic Detective Helps Ocala Police To Extract Critical Evidence

Posted in Uncategorized

Interview with Vladimir Katalov, Co-Founder and CEO, ElcomSoft

Vladimir, you’re co-founder and CEO at ElcomSoft. Tell us a bit about your role – how has it changed this year?

I do quite a lot of things from marketing to technical support, and from project management to presentations about our research on various events worldwide, from HR to accounting. It’s easier to say what I do not do

But most of my time is being spent on product development. It is me who decides which particular features our products should receive, how those features should be implemented, and what new products we should release. It is actually something new every single day.

Read More Continue reading Interview with Vladimir Katalov, Co-Founder and CEO, ElcomSoft

Posted in Uncategorized

New Cellebrite Analytics Product Family Accelerates Forensics Investigations

Cellebrite, the leader in forensic extraction, decoding and analysis solutions, today unveiled its new UFED Analytics Platform. Together with its powerful UFED data acquisition solutions, Cellebrite’s new analytics offering delivers intuitive data analysis and management capabilities that instantly unify law enforcement and prosecution teams, accelerate investigations and generate defensible evidence. Cellebrite’s Analytics product family is comprised of three offerings: UFED Analytics Desktop, is designed to meet the needs of a single forensic practitioner; UFED Analytics Workgroup addresses the needs of a small investigative team; and UFED Analytics Enterprise, is built to support hundreds of users managing data across numerous cases. These solutions empower examiners, analysts, investigators and prosecutors to simultaneously organize, search, map, visualize and manage large sets of digital data to identify case critical evidence quickly and efficiently. Continue reading New Cellebrite Analytics Product Family Accelerates Forensics Investigations

Posted in Uncategorized

MSAB Introducing Online Training Portal and Software Updates

MSAB has just launched an online training portal for customers. Complementing existing classroom training, users can now go online and access on-demand tutorials, recordings of webinars and details of live online training in the future.

Updated software versions for MSAB Kiosk & Tablet are now available, as well as XAMN Horizon. XAMN Horizon v1.0 is fully compatible with v7 XRY files and has also been updated to a 64Bit version for enhanced performance to process up to 100 XRY files for List, Connection, Timeline, Geographic and Conversation Views. Continue reading MSAB Introducing Online Training Portal and Software Updates

Posted in Uncategorized

Forensics Europe Expo – Recap

This article is a recap of some of the main highlights from the Forensics Europe Expo which took place at Kensington Olympia Conference Centre, London, on the 19th-20th of April 2016.

The Forensics Europe Expo covers all aspects of forensics, including bioforensics and other areas unrelated to digital forensics, and is held in conjunction with the Counter Terror Expo, which takes place in the same space.

This year’s expo had a much higher dedication to digital forensics than in previous years, with day two of the conference proper being dedicated to computer forensics and cybercrime. Throughout both days, there were also seminars from various digital forensics companies taking place in the smaller seminar area separate from the main auditorium.

Read More Continue reading Forensics Europe Expo – Recap

Posted in Uncategorized