±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 30595
New Yesterday: 0 Visitors: 44

±Latest Articles

RSS Feed Widget

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News   Forums   Articles

Page 2

Search on This Topic: News

[ Go to Home | Select a New Topic ]

SSD and eMMC Forensics 2016 - Part 3

Tuesday, June 07, 2016 (08:38:37)
What Has Changed in 2016 in the Way SSD Drives Self-Destruct Evidence: Demystifying eMMC, M.2, NVMe, and PCI-E.

by Yuri Gubanov & Oleg Afonin
© Belkasoft Research 2016


In the previous part of the article, we talked about eMMC storages and external SSDs. We also mentioned TRIM when talking about trimming behavior of eMMC. We will talk a bit more about TRIM this time and then move on to some real-life cases.

More about TRIM: Checking TRIM Support

There are several levels of TRIM support, all of which are worth checking.

- TRIM support by the SSD drive itself.
- Whether TRIM is enabled and active on a given system/configuration.
- Whether TRIM is correctly implemented by the SSD controller.
- Whether the SSD supports and implements DRAT and DZAT.
- Checking whether a particular SSD drive advertises TRIM support is as easy as reviewing its S.M.A.R.T. output, using the manufacturer’s bundled tool (e.g. SSD Toolbox, Samsung Magician and similar) or using a third-party tool such as CrystalDiskInfo.

Read More
  • Posted by: scar
  • Topic: News
  • Score: 0 / 5
  • (6562 reads)

Join The First Forensic Focus Twitter Chat, Wednesday 8th June: Careers

Friday, June 03, 2016 (06:04:19)
Join @ForensicFocus on Twitter at 3pm EST / 12pm PST / 7pm GMT (8pm BST in the UK) Wednesday 8th June for an in-depth chat on the topic of digital forensics careers.

Is there a career path in digital forensics? What advice would you give to someone considering a career in the field? What do you like most/least about being a DF practitioner? Join in the discussion on Twitter, Nurph or Tweetchat using the hashtag #dftalk
  • Posted by: scar
  • Topic: News
  • Score: 0 / 5
  • (8746 reads)

Oxygen Forensic Detective Helps Ocala Police To Extract Critical Evidence

Thursday, June 02, 2016 (08:08:04)
About Ocala Police Department

The Ocala Police Department, located in Ocala, Marion County, Florida along with the sheriff’s department have approximately 250 sworn officers in service who proudly serve the over 300,000 residents. Much like the rest of the world, Ocala and Marion County have had to keep with the changing landscape of today’s investigations. Our world is digital, with data held on computers, networks and mobile devices. This data, more often than not, is critical to Ocala and Marion County’s law enforcement officers who strive to protect and serve to protect the lives of the many residents.

In an effort to keep ahead of the ever-increasing technical aspects of today’s crimes the law enforcement of Marion County, rely on specialized tools and experts. These experts assist with various investigations from computer investigations, electronic surveillance, and mobile forensic collection and analysis. Having the best software to offer the community innovative support for today’s smart devices was one of the reasons the Ocala Police started using Oxygen Forensic Detective.

Interview with Vladimir Katalov, Co-Founder and CEO, ElcomSoft

Wednesday, May 25, 2016 (09:03:02)
Vladimir, you’re co-founder and CEO at ElcomSoft. Tell us a bit about your role – how has it changed this year?

I do quite a lot of things from marketing to technical support, and from project management to presentations about our research on various events worldwide, from HR to accounting. It's easier to say what I do not do Smile

But most of my time is being spent on product development. It is me who decides which particular features our products should receive, how those features should be implemented, and what new products we should release. It is actually something new every single day.

Read More
  • Posted by: scar
  • Topic: News
  • Score: 0 / 5
  • (8205 reads)

New Cellebrite Analytics Product Family Accelerates Forensics Investigations

Tuesday, May 24, 2016 (15:26:55)
Cellebrite, the leader in forensic extraction, decoding and analysis solutions, today unveiled its new UFED Analytics Platform. Together with its powerful UFED data acquisition solutions, Cellebrite’s new analytics offering delivers intuitive data analysis and management capabilities that instantly unify law enforcement and prosecution teams, accelerate investigations and generate defensible evidence. Cellebrite’s Analytics product family is comprised of three offerings: UFED Analytics Desktop, is designed to meet the needs of a single forensic practitioner; UFED Analytics Workgroup addresses the needs of a small investigative team; and UFED Analytics Enterprise, is built to support hundreds of users managing data across numerous cases. These solutions empower examiners, analysts, investigators and prosecutors to simultaneously organize, search, map, visualize and manage large sets of digital data to identify case critical evidence quickly and efficiently.

MSAB Introducing Online Training Portal and Software Updates

Tuesday, May 24, 2016 (08:29:19)
MSAB has just launched an online training portal for customers. Complementing existing classroom training, users can now go online and access on-demand tutorials, recordings of webinars and details of live online training in the future.

Updated software versions for MSAB Kiosk & Tablet are now available, as well as XAMN Horizon. XAMN Horizon v1.0 is fully compatible with v7 XRY files and has also been updated to a 64Bit version for enhanced performance to process up to 100 XRY files for List, Connection, Timeline, Geographic and Conversation Views.

Forensics Europe Expo – Recap

Monday, May 23, 2016 (13:04:17)
This article is a recap of some of the main highlights from the Forensics Europe Expo which took place at Kensington Olympia Conference Centre, London, on the 19th-20th of April 2016.

The Forensics Europe Expo covers all aspects of forensics, including bioforensics and other areas unrelated to digital forensics, and is held in conjunction with the Counter Terror Expo, which takes place in the same space.

This year’s expo had a much higher dedication to digital forensics than in previous years, with day two of the conference proper being dedicated to computer forensics and cybercrime. Throughout both days, there were also seminars from various digital forensics companies taking place in the smaller seminar area separate from the main auditorium.

Read More
  • Posted by: scar
  • Topic: News
  • Score: 0 / 5
  • (6978 reads)

Susteen Launches New Physical Explorer And Passcode Breaker

Monday, May 23, 2016 (06:32:16)
Secure View launches their new APEX Physical Explorer and Burner Breaker. The Burner Breaker is the only tool in the world, capable of breaking into locked Burner Phones and more! This hardware/software combination can break pincodes/passcodes on Burner Phones, Pre-paid phones, Androids, Chinese Chipset and South American phones. This is the only tool of it's kind, anywhere in the world. APEX is a Physical Analyzer that is also capable of acquiring physical dumps on locked LG phones.

Oxygen Forensic Detective Tackles Data Extraction and Acquisition from iCloud

Wednesday, May 18, 2016 (09:22:22)
Oxygen Forensics, the worldwide developer and provider of advanced forensic data examination tools for mobile devices, announced today the availability of Oxygen Forensic Detective 8.4 that helps forensics experts with data extraction and acquisition on iCloud including photos and any data on iCloud Drive.

“With the popularization of data in the cloud, especially iOS devices that utilize Apple’s iCloud technology, having access to the documents, videos and photos that reside in the cloud is even more critical for professionals in the field of forensics,” said Lee Reiber, Oxygen Forensics COO. “Obtaining photos and videos with geo coordinates and time stamps along with other documents can make all the difference for experts in their daily mobile forensic routines.”

Forensic Focus Forum Round-Up

Wednesday, May 18, 2016 (05:37:38)
Welcome to this month’s round-up of recent posts to the Forensic Focus forums.

Can you help with this iPhone extraction in which a deleted SMS has a future timestamp?

What happens to data on a backup tape when it is wiped? Add your answers on the forum.

Do you still record BIOS date / time? Add your vote to the poll.

Which details do you record about exhibits as part of the imaging process? Chime in on the forum.

What training would you recommend for a Special Agent who wants to move into computer forensics with no tech background?

What can be done when a cell provider’s records don’t match up with extracted data?

Do you have any recommendations for searching .mbox files? Add your thoughts on the forum.

Forum members discuss how to reconstruct a RAID 5.
  • Posted by: scar
  • Topic: News
  • Score: 0 / 5
  • (8274 reads)