±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 1 Overall: 34485
New Yesterday: 1 Visitors: 118

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Webinars

Search found 199 matches

Re: what else other than memory dump

Post Posted: Tue Jul 03, 2018 9:09 am

Hi,

I'd also consider running a virtual machine from the forensic image and monitor network activity coming from the potentially infected machine. There might be more calls to foreign IP addresses ...
steve862
Topic: what else other than memory dump
Replies: 12
Views: 2651
 

Re: Validation and decision making

Post Posted: Wed Jun 20, 2018 5:06 am

Hi,

In relation to measures of confidence in artefacts there are many possible examples. A simple one is a Windows registry, which may report the date of installation, but it isn't a fact it was i ...
steve862
Topic: Validation and decision making
Replies: 18
Views: 3131
 

Re: appropriate term for abuse material

Post Posted: Tue Jun 19, 2018 4:16 am

Hi,

I worked on child protection cases for about 12 years. Senior police officers in the UK made it clear the preferred term for us to use was always 'child abuse images', 'child abuse material' o ...
steve862
Topic: appropriate term for abuse material
Replies: 14
Views: 3489
 

Re: Validation and decision making

Post Posted: Tue Jun 19, 2018 4:08 am

Hi,

I think the latest one looks very good. I wouldn't have been able to start with a blank page and capture all that information in a flow chart in the first place. Capturing decision making in ...
steve862
Topic: Validation and decision making
Replies: 18
Views: 3131
 

Re: Validation and decision making

Post Posted: Sat Jun 16, 2018 4:40 am

Hi,

I like what you are trying to do but my concern is the fast moving nature of the programs we reverse engineer and the sheer number of different artefacts out there.

I also agree that docum ...
steve862
Topic: Validation and decision making
Replies: 18
Views: 3131
 

Re: has DF ever had any high-profile fails?

Post Posted: Wed Jun 13, 2018 7:05 am

Hi,

Further to the above I probably could mention Op Ore, having worked on a significant number of jobs in Ore.

I am aware that some police forces charged suspects based solely on the presence o ...
steve862
Topic: has DF ever had any high-profile fails?
Replies: 9
Views: 1754
 

Re: has DF ever had any high-profile fails?

Post Posted: Wed Jun 13, 2018 6:39 am

Hi,

I'm not aware of any where the digital forensics was wrong, in the sense that data capture, or processing, or analysis led to a miscarriage of justice. I am aware of cases where no digital exp ...
steve862
Topic: has DF ever had any high-profile fails?
Replies: 9
Views: 1754
 
Page 1 of 29
Go to page 1, 2, 3 ... 27, 28, 29  Next