Collaborate Disseminate
Have you ever served a search warrant and stared at the mountainous amount of digital media collected and wondered how much is actually related to your investigation? Or, have you had to undertake terabytes of storage media and wondered if the needle … Continue reading Take It Or Leave It: Triaging Digital Evidence
The problem that has been plaguing investigators is the fact Android devices offer different mechanisms of data protection. For this reason, it is almost impossible to develop a single method of extracting and decrypting a device’s data. Of course, in … Continue reading It’s As Easy As E D L. All About EDL Method In Oxygen Forensic Detective
Errata Security discuss how to decrypt WhatsApp end-to-end media files.
The HTCIA 2020 call for presentations is now open.
Linux Security Labs share a review of GRR Rapid Response.
Rick Holland recaps the SANS Cyber Threat Intelligence Summit 2020. Continue reading What’s Happening In Forensics – Jan 29, 2020
Amped Software just released another update to Amped Authenticate, the leading forensic software for digital forensic experts to exploit the data behind digital images, allowing analysis of image integrity, authenticity, metadata, source and history, a… Continue reading Amped Authenticate Update 15518: Customizable Reporting, Sun Position And More
Andrea Fortuna shares some thoughts on the Jeff Bezos phone hack data.
Ciarán O’Brien provides a triage script to help with retrieving artifacts from compromised Citrix hosts.
Magnet discuss how their new AXIOM Cyber tool can help with employee misco… Continue reading What’s Happening In Forensics – Jan 28, 2020
Adam Harrison discusses evidence of program execution on different Windows OS versions.
Magnet release AXIOM Cyber for remote acquisitions.
Foxton Forensics discover some differences between Chromium and Edge Chromium artifacts.
Andrew Hoog unpicks … Continue reading What’s Happening In Forensics – Jan 27, 2020
Magnet Forensics is proud to announce the official release of their newest product: Magnet AXIOM Cyber. AXIOM Cyber is an innovative new solution purpose-built for organizations that need to perform remote acquisitions as well as collect and analyze ev… Continue reading Magnet AXIOM Cyber — A New Way To Simplify Remote Forensic Investigations
Welcome to this month’s round-up of recent posts to the Forensic Focus forums.
Forum members discuss IPv6 to IPv4 conversion in response to a warrant request.
Can you explain why this prefetch folder is empty?
How would you respond to this bitcoin e… Continue reading Forensic Focus Forum Round-Up
Steve Anson’s new book, Applied Incident Response, is now available on Amazon.
Ciarán O’Brien has been working on a Jupyter notebook to help automate the process of pulling IOCs from artifacts recovered from compromised Citrix Netscalers.
Heather Mah… Continue reading What’s Happening In Forensics – Jan 24, 2020
by Christa Miller
Only a few short years ago, the idea of recovering forensic data from the cloud seemed like either troubling overreach, or unnecessarily redundant given the availability of evidence from mobile devices.
As encryption became more pre… Continue reading Industry Roundup: Cloud Forensics