±Forensic Focus Partners

Become an advertising partner

±Your Account


Forgotten password/username?

Site Members:

New Today: 0 Overall: 32089
New Yesterday: 0 Visitors: 107

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

RSS Feed Widget

±Latest Webinars

Page 3

Passware Kit 2017 v2: Supports iOS 10.2, iOS Keychain And iCloud Photo Library

Monday, March 20, 2017 (17:05:58)
The new version of Passware Kit Forensic recovers passwords for iOS 10.2 iTunes backups, WPA/WPA2 WiFi connections. Instantly extracts passwords stored in iOS Keychain. Acquires images (including deleted ones) from iCloud Photo Library. Improves performance while running on multi-GPU systems or using Distributed Password Recovery.
  • Posted by: scar
  • Topic: News
  • Score: 0 / 5
  • (2045 reads)

Phill Moore's Round-Up Of This Month In Forensics

Monday, March 20, 2017 (13:23:15)
James Habben at 4n6ir explores the SCCM database in two posts, and Mark Mckinnon wrote an Autopsy Plugin to extract the relevant data.

Didier Stevens shows how to extract password history from the ntds.dit file.

Roberto Rodriguez shows how to build a sysmon dashboard on top of ELK.

Darren Freestone has shared his thoughts on the recent SHA1 collision and its impact on digital forensics.

Paul Sanderson announced a book on SQLite Forensics.

Andrea Lazzarotto has a post on extracting data from damaged NTFS drives.
  • Posted by: scar
  • Topic: News
  • Score: 0 / 5
  • (1748 reads)

Belkasoft Evidence Center 8.3 Is Out with New UX and 64-bit Edition

Thursday, March 16, 2017 (13:59:18)
Belkasoft rolls out a major usability and performance update to Belkasoft Evidence Center 2017. The new release features brand new layout to simplify common tasks and speed up the routine, and comes with a 64-bit edition that significantly boosts performance and reliability when working on large cases.

Sign up to a free webinar on what's new in BEC 2017 v.8.3

Forensic Focus Forum Round-Up

Wednesday, March 15, 2017 (10:20:09)
Welcome to this month’s round-up of recent posts to the Forensic Focus forums.

Do you have any recommendations for image enhancement? Add your suggestions on the forum.

Forum members discuss deleted files and allocated space in EnCase.

Which job category do you put down on your car insurance forms?

Forum members help a student with questions about recovering data from a virtual machine.

Can you recommend a hex viewer that works on Mac?

Forum members discuss decompressing hyberfil.sys.

What might make the last printed date appear to be before the metadata creation date of a Word document? Chime in on the forum.

Forum members discuss how to work out which machines a specific USB device has been connected to.

Forum members give advice about how to see if an external drive with Bitlocker has been mounted on a machine.

Is it possible to truly delete a file, and if so, how? Add your thoughts on the forum.
  • Posted by: scar
  • Topic: News
  • Score: 0 / 5
  • (1474 reads)

Interview With Devon Ackerman, Senior Director, Kroll

Tuesday, March 14, 2017 (11:34:32)
Devon, tell us a bit about yourself. What's your background, and what's your current role?

My name is Devon Ackerman, and I am currently a Senior Director in Kroll’s Cyber Security and Investigations practice. In this role, I have leadership over an Incident Response team as well as client engagement responsibilities and hands-on investigations.

Prior to Kroll, I served as a Supervisory Special Agent and Senior Digital Forensic Examiner for the FBI. I began my career with the FBI back in 2006 and in 2008 entered the Academy to complete training as an FBI Special Agent. After graduation from the FBI Academy, I was assigned to North Carolina, or more specifically, the “Charlotte Division” of the FBI. I was initially assigned national security investigations and related matters that shared a cyber nexus, later gaining experience in cyber and DFIR matters across the board, to include traditional criminal matters.

Read More
  • Posted by: scar
  • Topic: News
  • Score: 0 / 5
  • (997 reads)

Unscrambling Pixels: Forensic Science Is Not Forensic Fiction

Monday, March 06, 2017 (13:54:45)
by Martino Jerian, CEO and Founder, Amped Software

In every branch of forensic science, we have to fight with the falsehoods introduced by the popular series à la CSI (hence the properly called CSI effect), but probably this belief is the strongest in the field of forensic image and video analysis. From endless zooming from satellite imagery, to enhancing the reflection of a reflection of a reflection, to identifying faces or fingerprints at an unbelievable pace, we very often have to explain, even to “the experts”, what is science and what is fiction.

This is complicated also by the fact that sometimes we are able to extract information from images and videos where at a first glance there is absolutely nothing visible. However, very often we can’t do anything to improve images that to that average person, don’t look that bad.

Read More
  • Posted by: scar
  • Topic: News
  • Score: 0 / 5
  • (1127 reads)

Magnet AXIOM Now Supports Signal Forensics

Monday, March 06, 2017 (12:08:08)
Encrypted chat apps can be some of the hardest nuts to crack — especially when someone is trying to cover their tracks in advance — but they can also be vitally important to an investigation.

Signal is a popular chat app with an emphasis on privacy. It uses encryption on in-transit data, and Magnet AXIOM now parses and carves for chat and comment data in the Signal app for Android smartphones.

In cases where the user doesn’t set a password, application data can often be recovered and decrypted. Even if decryption is not possible, group and user information, and information about messages can still be recovered, although the actual message and attachment content won’t be available.

Magnet Forensics Portable Case Part Two - How To

Thursday, March 02, 2017 (12:29:49)
In part one of our Portable Case series, our Director of Forensics, Jessica Hyde, took a look at the features and benefits of Portable Case. She highlighted the power of real-time collaboration with multiple stakeholders and having all the feedback collected in one place.

Read part one here.

In part two: Magnet AXIOM Portable Case for Non-Technical Stakeholders, Jamie McQuaid gives a deep dive into using Portable Case.

Portable Case is a feature available in Magnet AXIOM which allows users to share their findings from an investigation with stakeholders who might not be forensic examiners, and may not have access to a full version of AXIOM.

Phill Moore's Round-Up Of This Month In Forensics

Monday, February 27, 2017 (12:35:28)
The Forensic 4Cast nominations are open! Vote for your favourite hardware, software, blog, book and more.

Mari DeGrazia discusses what happens when Windows lies.

Oxygen Forensic Detective has been updated with even more features.

Michael on the Digital Forensics Podcast explains virtual machine forensics.

BlackBag continues their Windows Forensics Training series.

Didier Stevens demonstrates how to decrypt and scan a password protected ZIP file.

Oleg Afonin demonstrates how to break 70% of passwords in minutes.

TrewMTE uncovers evidence from older mobile phones.

Phill Moore is the curator of This Week In 4n6, a blog which puts together a summary of relevant industry news in digital forensics and incident response.
  • Posted by: scar
  • Topic: News
  • Score: 0 / 5
  • (1266 reads)

The Newest Version Of XAMN Spotlight From MSAB Is Coming Soon

Thursday, February 23, 2017 (14:31:59)
Find your answers.
Faster, easier and with greater precision.

The enhanced XAMN Spotlight will help you attain the pivotal answers you need to make sense of your data – quick, precise, easy to use.

This allows investigators, detectives and managers to analyze and create hypotheses quicker, with greater precision and providing a higher chance of success.