±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 3 Overall: 34853
New Yesterday: 2 Visitors: 139

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Webinars

Search found 200 matches

Re: anti-forensics

Post Posted: Fri Oct 19, 2018 6:50 am

Hi,

There have been many online forums over the years where predominantly paedophiles post advice on how to avoid detection and how to hide what you've been up to in the event your computer is seiz ...
steve862
Topic: anti-forensics
Replies: 23
Views: 3712
 

Re: what else other than memory dump

Post Posted: Tue Jul 03, 2018 9:09 am

Hi,

I'd also consider running a virtual machine from the forensic image and monitor network activity coming from the potentially infected machine. There might be more calls to foreign IP addresses ...
steve862
Topic: what else other than memory dump
Replies: 12
Views: 3291
 

Re: Validation and decision making

Post Posted: Wed Jun 20, 2018 5:06 am

Hi,

In relation to measures of confidence in artefacts there are many possible examples. A simple one is a Windows registry, which may report the date of installation, but it isn't a fact it was i ...
steve862
Topic: Validation and decision making
Replies: 18
Views: 3783
 

Re: appropriate term for abuse material

Post Posted: Tue Jun 19, 2018 4:16 am

Hi,

I worked on child protection cases for about 12 years. Senior police officers in the UK made it clear the preferred term for us to use was always 'child abuse images', 'child abuse material' o ...
steve862
Topic: appropriate term for abuse material
Replies: 14
Views: 4181
 

Re: Validation and decision making

Post Posted: Tue Jun 19, 2018 4:08 am

Hi,

I think the latest one looks very good. I wouldn't have been able to start with a blank page and capture all that information in a flow chart in the first place. Capturing decision making in ...
steve862
Topic: Validation and decision making
Replies: 18
Views: 3783
 

Re: Validation and decision making

Post Posted: Sat Jun 16, 2018 4:40 am

Hi,

I like what you are trying to do but my concern is the fast moving nature of the programs we reverse engineer and the sheer number of different artefacts out there.

I also agree that docum ...
steve862
Topic: Validation and decision making
Replies: 18
Views: 3783
 

Re: has DF ever had any high-profile fails?

Post Posted: Wed Jun 13, 2018 7:05 am

Hi,

Further to the above I probably could mention Op Ore, having worked on a significant number of jobs in Ore.

I am aware that some police forces charged suspects based solely on the presence o ...
steve862
Topic: has DF ever had any high-profile fails?
Replies: 9
Views: 2131
 
Page 1 of 29
Go to page 1, 2, 3 ... 27, 28, 29  Next