Researchers at The University of Texas at San Antonio (UTSA) College of Business have received two grants totaling $1 million to help companies better detect insider threats and enhance computer security. UTSA researchers were awarded $797,000 in funding from the Naval Postgraduate School, the U.S. Navy's national security research university, as part of a three-year $1.4 million contract with the U.S. Department of Homeland Security Science and Technology Directorate Cyber Security Division. UTSA researchers will be responsible for developing an algorithm that detects hostile insiders using digital forensics - the algorithm will help companies detect data exfiltration, employee misconduct, and other unauthorized activity that jeopardizes the organization.

• Posted by: jamie
• Topic: News
• Score: 0 / 5
• (476 reads)

• comments?
• Printer Friendly Page
• Send to a Friend

Since Reconnoitre was released in January this year there have been a number of enhancements driven by requests from our users including link file support, EXIF and geolocation support, features to query C4P hash servers and advanced reporting.

Of course during this time numerous enhancements were also made to the core functionality of Reconnoitre, i.e. parsing Volume Shadow Copies, to further streamline and enhance the user experience. These enhancements included the ability to hash just graphics files, comprehensive tooltips to accelerate the learning process and additional “copy to clipboard” functions making it easier to get data from grids (and pictures) out of Reconnoitre for those who don’t want to use our report...

• Posted by: PaulSanderson
• Topic: News
• Score: 0 / 5
• (802 reads)

• comments?
• Printer Friendly Page
• Send to a Friend

As you may already know, Apple has always been criticized for using their extremely popular devices to track users and use this information to expand their own databases. This tutorial assumes that you have already jailbroken your device and you know how to navigate your way through iOS menus, if you don’t then check out our other articles that cover just that. In this small and insightful tutorial, you’ll see just how easy it is to extract photos from an Apple device and use the EXIF data to view the location of where the photo was taken along with other cool details.

Apple devices store much more information than you would ever imagine. It is surprisingly accurate as well, with timestamps to the millisecond and even location data that is frighteningly accurate. The main challenge for the user however, is correctly extracting, preserving and analyzing this information...

Read More...

• Posted by: jamie
• Topic: Announcements
• Score: 0 / 5
• (798 reads)

• 1 comment
• Printer Friendly Page
• Send to a Friend

Oxygen Software has updated its flagship mobile forensic product, Oxygen Forensic Suite 2013, adding the ability to view and analyze aggregated contact information through multiple acquired devices. The new release also includes an enhanced search algorithm, allowing investigators to execute complex searches in background without slowing down overall performance.

The re-worked aggregate view enables forensic experts to instantly view matching and similar contacts discovered across several devices. The ability to view aggregated contacts can help investigators collect additional information about a contact that may be available across the range of devices being analyzed.

• Posted by: OxygenSoftware
• Topic: News
• Score: 0 / 5
• (823 reads)

• comments?
• Printer Friendly Page
• Send to a Friend

This is a keywords searching tool working on the allocated, unallocated data and the slackspace, using an indexer software and a database storage. Often during a computer forensics analysis we need to have all the keywords indexed into a database for making many searches on it in a fast way. We could use strings and grep, for searching the keywords, but we cannot have a database and an engine, then we can’t search them inside many formats, like compressed files, including the ODT, DOCX, XLSX, etc. So, I tried to solve this problem, first of all we need to extract, what I call “spaces”...

Read More...

• Posted by: jamie
• Topic: Announcements
• Score: 0 / 5
• (1153 reads)

• comments?
• Printer Friendly Page
• Send to a Friend