As more employees are required to work from home, we’ve heard from our customers that they need the ability to remotely collect data from Mac systems without having to send MacQuisition hardware to someone’s home. In order to help our customers in this unique time, BlackBag is making a new software only option available to MacQuisition customers for a limited time.

Below we’ve answered some common questions about this new functionality.

In addition, below is an easy to use how-to guide for the person running the application and completing the collection.

Read More

• Posted by: scar
• Topic: News
• Score: 0 / 5
• (441 reads)

• comments?
• Printer Friendly Page
• Send to a Friend

Oxygen Forensics, a global leader in digital forensics for law enforcement, federal, and corporate clients, today announced the release of Oxygen Forensic® Detective (12.3), the company’s flagship software. In addition to providing customers with a number of powerful new features, the release also makes Oxygen Forensic® Detective the first and only digital forensics platform to offer physical bypass support for Huawei devices running Android OS 10.

• Posted by: OxygenForensics
• Topic: News
• Score: 0 / 5
• (527 reads)

• comments?
• Printer Friendly Page
• Send to a Friend

Global software company Nuix (www.nuix.com) and MSAB, a pioneer in mobile device forensic examination, today announced a new integration for transferring mobile device data from MSAB XAMN to Nuix Workstation for analysis alongside other devices and digital evidence sources.

• Posted by: adampembrey
• Topic: News
• Score: 0 / 5
• (589 reads)

• comments?
• Printer Friendly Page
• Send to a Friend

Magnet AXIOM 3.11 is now available to download within AXIOM or over at the Magnet Forensics Customer Portal. AXIOM 3.11 brings you new Device Identifiers — with device information like IP addresses and camera serial numbers — as well as support for .dar files from Cellebrite Advanced services and a number of new and updated artifacts, like Signal and Apple Pay.

If you haven’t tried AXIOM yet, request a free 30-day trial here.

• Posted by: MagnetForensics
• Topic: News
• Score: 0 / 5
• (710 reads)

• comments?
• Printer Friendly Page
• Send to a Friend

In the last two months, Atola Technology has come out with three firmware updates for Atola Taskforce forensic imager!

Each of the releases contained a key feature: 2020.1 introduced target drive encryption, 2020.2 allowed imaging to a segmented E01 file and finally 2020.3 features segmented hashing.

“These features were among the most anticipated by our customers and help further enhance evidence acquisition, verification, and storage process,” says Atola’s CTO Vitaliy Mokosiy. “While target encryption allows for secure image preservation and transportation, segmented E01 files are easier to create and store, and segmented hashing ensures image verification even if the evidence drive is damaged or the image goes corrupt before it can be presented in court.”

• Posted by: Yulia
• Topic: News
• Score: 0 / 5
• (1322 reads)

• comments?
• Printer Friendly Page
• Send to a Friend

Apple's ever-changing features and updates can make it hard to keep up with the latest changes to the file system and understand how it impacts your investigations.

• Posted by: blackbag
• Topic: News
• Score: 0 / 5
• (785 reads)

• comments?
• Printer Friendly Page
• Send to a Friend

Welcome to this month’s round-up of recent posts to the Forensic Focus forums.

What tools would you recommend for MacOS remote forensic collection?

Can you help CopyRight with a question about internal hard disk removal logs?

How would you process an external WD HD with WD Smartware VCD?

Can you help mhibert to bypass a Windows 10 password?

How can you tell whether a Skype call was made using video or audio?

• Posted by: scar
• Topic: News
• Score: 0 / 5
• (823 reads)

• comments?
• Printer Friendly Page
• Send to a Friend

Welcome to Oxygen Forensic Detective’s Knowledge Nuggets. In this video we’re going to discuss decrypting WhatsApp messaging.

Let’s go over a few very important points that you need to consider before analyzing WhatsApp.

Number one: always place the device in airplane mode. This is important for many reasons, but the reason specific to WhatsApp is [that] during the extraction of WhatsApp, iCloud backup or Google Drive backup or the WhatsApp cloud, entering the phone verification code will disable the previous WhatsApp installation. The application on the device will then lose its verified status.

Watch the video

• Posted by: scar
• Topic: News
• Score: 0 / 5
• (1010 reads)

• comments?
• Printer Friendly Page
• Send to a Friend

BlackBag’s industry-leading courses, Basic Forensic Investigations, Windows Forensic Investigations, and Apple Forensic Investigations are now available as live, virtual courses.

• Posted by: blackbag
• Topic: News
• Score: 0 / 5
• (854 reads)

• comments?
• Printer Friendly Page
• Send to a Friend

The COVID-19 pandemic has reshaped our world almost overnight—upending daily routines and disrupting much of the global economy. Unfortunately, crime never takes a day off, not even during times of crisis. Ongoing digital forensics investigations have lost none of their urgency, and investigators still need resources that will enable them to use their tools to the fullest potential. Oxygen Forensics is here to help.

• Posted by: OxygenForensics
• Topic: News
• Score: 0 / 5
• (1372 reads)

• comments?
• Printer Friendly Page
• Send to a Friend