±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 36738
New Yesterday: 0 Visitors: 141

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

Page 3

Search on This Topic: News

[ Go to Home | Select a New Topic ]

What's Happening In Forensics - Mar 03, 2020

Monday, March 02, 2020 (14:41:51)
13Cubed share a memory forensics challenge.

Petr Stuchlík discusses SMB endpoint fingerprinting.

DFRWS share presentations from last year's US conference.

Ryan Benson shares some digital forensics writing tips.
  • Posted by: scar
  • Topic: News
  • Score: 0 / 5
  • (1188 reads)

Android Auto And Google Assistant – How Google Encourages Hands-Free Motoring

Monday, March 02, 2020 (10:10:28)
Josh Hickman shares his research at DFRWS US 2019.

Josh: My name is Josh Hickman. I am the forensic scientist manager for the digital evidence section in the North Carolina state crime lab. And I am here this morning to talk about Android Auto and Google Assistant. And I know I'm the last presentation before lunch, so I'll try to do my best to get you out here on time. Real quick before I do get started, I gave this presentation to our labs administrators as a dry run and I inadvertently set off a couple of Google Assistant phones during it. I will make a conscious effort to not say the hot word to trigger Google Assistant, but I may slip up inadvertently do it. So you're forewarned.

So Android Auto and Google Assistant work together. You know, the ability to have our vehicles interface with our mobile devices is not a new concept, but it's one that's really started to get into the mainstream.

Watch the video
  • Posted by: scar
  • Topic: News
  • Score: 0 / 5
  • (1202 reads)

Chromium-Based Microsoft Edge From A Forensic Point Of View

Wednesday, February 26, 2020 (15:06:46)
by Oleg Skulkin & Svetlana Ostrovskaya

Recently Microsoft finally released the Chromium-based version of Edge Browser, so it seems we’ll miss ESE databases soon (not). Of course, it may have a similar set of forensic artifacts to Chromium or Chrome, but we must check it anyway. What’s more, the browser is available not only for Windows, but also for macOS, Android and iOS.

On Windows, Edge data is available under the following location:

C:\Users\%USERNAME%\AppData\Local\Microsoft\Edge\User Data\Default

Let’s start from bookmarks or “favorites”. They are stored in a JSON file with the same name – Bookmarks. You can open it with any text editor. The timestamps are stored in WebKit format – a 64-bit value for microseconds since Jan 1, 1601 00:00 UTC.

Read More
  • Posted by: scar
  • Topic: News
  • Score: 0 / 5
  • (1343 reads)

Forensic Pattern Of Life Analysis

Tuesday, February 25, 2020 (15:32:58)
by Christa Miller, Forensic Focus

Pattern of life analysis isn’t a new concept to anyone who’s ever been involved with intelligence, in particular surveillance. It’s all about the habits that people — suspects, persons of interest, crime victims, or those connected to any of the above — carry out in day-to-day life.

When it comes to digital devices, how users interact with them can tell a very detailed story about any given timeframe. There are two reasons for doing this. One, as Brett Shavers outlined in a blog post last year, is to tie a particular device to a user — more of an issue for a computer or tablet than a smartphone.

Read More
  • Posted by: scar
  • Topic: News
  • Score: 0 / 5
  • (1210 reads)

Get Uber Acquisition And Timestamps In Google Search URLs In Magnet AXIOM 3.10

Monday, February 24, 2020 (18:02:35)
Magnet AXIOM 3.10 is now available for AXIOM users! Get Magnet AXIOM 3.10 today to acquire from Uber, get new timestamps in Google search URLs, as well get more than 20 updated artifacts.

If you haven’t tried AXIOM yet, request a free trial here.

BlackBag Announces Release of MacQuisition 2020 R1

Monday, February 24, 2020 (16:15:56)

MacQuisition brings together the most comprehensive Apple imaging with new live and booted triaging of Apple devices, in industry-leading release.

FORMOBILE Survey: Law Enforcement Officers' Requirements For Training

Monday, February 24, 2020 (14:31:36)
For a project that promises great leaps in the development of mobile forensic related technologies, and a complete guide to the practices and standards that professionals in Europe should follow, the necessary training to support these initiatives is critical!

That is why a new ‘Novel Training Curriculum’ was defined as the third objective of FORMOBILE. Effective training empowers specialists, instilling them with confidence and assuring them that they are following the best methods to complete their work.
  • Posted by: scar
  • Topic: News
  • Score: 0 / 5
  • (1930 reads)

Australian Police: XAMN Helped Solve Armed Robbery

Monday, February 24, 2020 (13:59:38)
By: Jeremy Byers, a police investigator in Australia
This post was originally written and published on the MSAB blog


I have been employed as a member of the Australian Federal Police and the South Australian Police since 2008. Most of my law enforcement experience has been investigating serious and organized crime. I am presently undertaking a Graduate Diploma in cybersecurity under the supervision of Dr Matthew Sorell Senior Lecturer at University of Adelaide.

Investigations within this field of policing increasingly rely upon interpreting large volumes of telecommunications data commonly derived from service providers as well as data extracted from mobile telephones.

Forensic Focus Forum Round-Up

Monday, February 24, 2020 (09:58:11)
Welcome to this month’s round-up of recent posts to the Forensic Focus forums.

Can you tell whether files have been copied from one USB to another?

What temperature should your forensic lab be?

How do you process large amounts of adult content?

What do people mean when they talk about 'unallocated' or 'free' space?

How can you tell if an HDD has been cloned?
  • Posted by: scar
  • Topic: News
  • Score: 0 / 5
  • (1233 reads)

What's Happening In Forensics - Feb 20, 2020

Thursday, February 20, 2020 (17:27:03)
Nominations are open for the 2020 Forensic 4:Cast awards.

FireEye discuss how to correlate user search LNK files.

Group IB share a forensic view of Chromium-based Microsoft Edge.

ElcomSoft release iOS Forensic Toolkit 5.30, including jailbreak-free extraction for multiple Apple devices.

Registration is open for the European Magnet User Summits.
  • Posted by: scar
  • Topic: News
  • Score: 0 / 5
  • (1738 reads)