Oleg Afonin discusses what information is stored in iCloud, and how much Apple will provide in response to government requests.

Oleg Skulkin shows how to find Nextcloud storage forensic artifacts on endpoints.

• Posted by: scar
• Topic: News
• Score: 0 / 5
• (493 reads)

• comments?
• Printer Friendly Page
• Send to a Friend

Christa: Hello and welcome to the Forensic Focus podcast. Monthly we interview experts from the digital forensics and incident response community on a host of topics ranging from technical aspects to career soft skills. I'm your host, Christa Miller.

Today we're welcoming Joseph Walsh, the director of the Master's of Criminal Justice program and an Assistant Professor of Computer Science and Criminal Justice at DeSales University.

Prior to joining the department of Computer Science and Mathematics at DeSales, Joe earned a Master of Science in Information Systems with a concentration in Cybersecurity; a Master of Arts degree in Criminal Justice with a concentration in Digital Forensics; and a Bachelor of Science degree where he majored in Information Systems with a concentration in Security Administration.

Listen to the podcast

• Posted by: scar
• Topic: News
• Score: 0 / 5
• (558 reads)

• comments?
• Printer Friendly Page
• Send to a Friend

Packt Publishing have a $5 sale on all digital forensics ebooks.

Gilad David Maayan shares 8 free tools to help automate the incident response process.

The CfP for the SANS DFIR Summit opens today.

• Posted by: scar
• Topic: All
• Score: 0 / 5
• (599 reads)

• comments?
• Printer Friendly Page
• Send to a Friend

Patrick Mullan shares his research at DFRWS EU 2019.

Patrick: Hello, I am Patrick. I would like to introduce you to our recent research on forensic source identification using JPEG image headers. So the idea is to identify the source of the image — so which device took the image — with a focus on smartphones, particularly Apple devices.

So why is this interesting? It’s one goal of multimedia security; it’s often called reconstruction of provenance, where provenance means to find something out about the background of the image: the history of the image. Like, was it processed with some software; which path did the picture take, or was it distributed over, until it reached a certain point; and finally, and that’s what we are looking into today, to identify the source of the multimedia content.

So in this scene on the right, the question is, which of the devices took the picture on the right?

Watch the video

• Posted by: scar
• Topic: News
• Score: 0 / 5
• (766 reads)

• comments?
• Printer Friendly Page
• Send to a Friend

Elcomsoft's Oleg Afonin discusses the true meaning of iOS recovery, DFU and SOS modes for mobile forensics.

DFIR.training share new tools, reviews and events.

HTCIA 2020 is open for presentation submissions.

Cellebrite release UFED, UFED Physical Analyzer, UFED Logical Analyzer & Cellebrite Reader v.7.28.

• Posted by: scar
• Topic: News
• Score: 0 / 5
• (627 reads)

• comments?
• Printer Friendly Page
• Send to a Friend

Jon, tell us about your role at TransPerfect Legal Solutions. What does a typical day look like?

I have the privilege of managing a talented team of eight forensic examiners in our New York forensic lab, in addition to contributing to the daily operations of our global Forensic Technology & Consulting (FTAC) division.

Whether I’m assisting with forensic acquisitions and analyses, consulting on active projects, or scoping upcoming engagements, there’s rarely a dull moment.

Read More

• Posted by: scar
• Topic: News
• Score: 0 / 5
• (462 reads)

• comments?
• Printer Friendly Page
• Send to a Friend

Cellebrite have acquired BlackBag Technologies.

Sarah Edwards provides context to iOS app usage with knowledgeC.db and APOLLO.

Gillware Digital Forensics is now Tetra Defense.

Belkasoft announce their 2020 training courses.

• Posted by: scar
• Topic: News
• Score: 0 / 5
• (912 reads)

• comments?
• Printer Friendly Page
• Send to a Friend

Jad, tell us a bit about OUTRIDER and how it came about?

We talk to officials in law enforcement from a variety of different backgrounds and the one constant for us is trying to find ways to help them do the important work they do. In the case of OUTRIDER, I had been speaking with police and parole officers who were looking for quick and easy ways to tell if their parolees — often child predators — were at risk of reoffending. They needed a way to be able to tell if they had been accessing illicit materials, and fast. We’ve had a triage tool for many years now but have been looking for the right time to re-imagine how triage tools work and build something new.

We took that away and built OUTRIDER — a solution that not only helps them scan devices with lightning speed, but is easy enough for all levels of technical proficiency.

Read More

• Posted by: scar
• Topic: News
• Score: 0 / 5
• (665 reads)

• comments?
• Printer Friendly Page
• Send to a Friend

The SANS Cyber Threat Intelligence Summit will be taking place next week in Washington, DC.

BlackBag share a case study showing how geolocation data was used to track down a burglar.

Cyber Triage Version 2.11 has been released, featuring investigation filtering and timeline history.

Elcomsoft's Oleg Afonin discusses attached storage forensics using a case study of a TerraMaster NAS.

• Posted by: scar
• Topic: News
• Score: 0 / 5
• (629 reads)

• comments?
• Printer Friendly Page
• Send to a Friend

Steve, can you tell us a bit about yourself and how you got into e-discovery and digital forensics?

Sure. I actually was a banker back in the mid 1980s and there was a financial crash. And from that, there was a quasi-governmental organization called the Resolution Trust Corp that was born, and I became an investigator for them. Our investigations back in those days were all paper-based.

But, around the early 90s, we started talking about electronically stored information. Obviously they were mainframe computers and things, but it became more and more normalized to start to deal with computer files instead of paper files.

Read More

• Posted by: scar
• Topic: News
• Score: 0 / 5
• (678 reads)

• comments?
• Printer Friendly Page
• Send to a Friend