±Partners and Sponsors

±Your Account


Forgotten password/username?

New Today: 0
New Yesterday: 11
Overall: 26771
Visitors: 80

±Follow Forensic Focus

Join our LinkedIn group

Subscribe to news

Subscribe to forums

Subscribe to blog

Subscribe to tweets

Page 2

Search on This Topic: News

[ Go to Home | Select a New Topic ]

Investigating User Activity with Windows Artifacts in IEF

Monday, June 30, 2014 (14:51:43)
Sometimes when conducting forensic examinations, investigators can lose sight of the fact that they’re investigating the actions of a person, not a computer. Almost every event or action on a system is the result of a user either doing something (or not doing something) at a particular time to create that event. It’s important for an investigator to understand how those events on a system correlate to the actions of somebody in the real world.

New with the Business and OS artifacts module in Internet Evidence Finder (IEF) v6.4, Magnet Forensics has added a number of valuable Windows operating system artifacts that will help investigators gain insight into details about a system and its users. These artifacts can be broken down into two categories: system artifacts and artifacts focused around a user’s activity. This blog discusses artifacts based around user activity and how they are relevant to your investigation...

Read More (Magnet Forensics)

Paraben Releases Device Seizure 6.6: Supports 100% of iOS & Over 96% of Android

Tuesday, June 24, 2014 (09:01:59)
Paraben Corporation, a leader in the digital forensics industry, has announced the release of Device Seizure v6.66. The first commercial tool for mobile forensics is hitting mobile investigations with a vengeance. By adding support for nearly every smartphone available while keeping the price very affordable, forensic examiners are bound to catch more bad guys than ever before.

“This version of Device Seizure feels like a whole new beast,” stated Amber Schroader, CEO of Paraben Corporation. “Not only have we evened the playing field by adding hundreds of new phone model support, we've added app parsing to delve deeper into a mobile phone’s secrets.” Device Seizure remains one of the most affordable, yet comprehensive mobile forensics tools on the market today.
  • Posted by: paraben
  • Topic: News
  • Score: 0 / 5
  • (1213 reads)

Finding and Analyzing Windows System Artifacts with IEF

Monday, June 23, 2014 (14:16:47)
New with the Business and OS artifacts module in Internet Evidence Finder (IEF) v6.4, Magnet Forensics has added a number of valuable Windows operating system artifacts that will help investigators gain insight into details about a system and its users. IEF will now search for File System Information, Jump Lists, LNK Files, Network Share Information, Operating System Information, Shellbags, Startup Items, Timezone Information, USB Devices, User Accounts, Windows Event Logs and Windows Prefetch Files. Windows contains a wealth of information and artifacts around the system that can be quite valuable to investigators.

Read More (Magnet Forensics)

Oxygen Forensic Suite 2014 Adds New Acquisition Methods for Android Devices

Friday, June 20, 2014 (12:29:41)
Oxygen Forensics has updated its flagship mobile evidence discovery solution, Oxygen Forensic Suite 2014, adding physical acquisition support for MTK-based Android devices and introducing dual-joint logical acquisition support for all Android devices.

The new release greatly simplifies the acquisition of MTK-based Android devices, allowing investigators to make a full physical dump of the device while seamlessly bypassing the lock screen. The new physical acquisition method requires no rooting to get full access to the device data. In addition, Oxygen Forensic Suite 2014 implements a new approach to logical acquisition of Android devices. The new joint extraction method works by combining data acquired via Android backup and with OxyAgent utility, returning the most complete data set possible via logical acquisition. The new joint extraction method automatically complements pieces of information that might be otherwise missing if only one acquisition method was used.

Magnet Forensics Releases Internet Evidence Finder v6.4

Thursday, June 19, 2014 (13:55:32)
With the release of IEF v6.4, Magnet Forensics adds to its list of Internet and mobile-supported artifacts, and introduces a new Business Applications and OS Artifacts Module to enable the recovery of more evidence with an IEF search.

The Business Applications and OS Artifacts Module adds support for the recovery of 42 types of business application artifacts, and 16 types of Windows operating system artifacts. With the increasing size and complexity of investigations, there is more pressure than ever for forensics professionals to find ways to streamline the investigative process and quickly get to relevant evidence. When added to an IEF license, this new module will expand the types of evidence that can be found by an IEF search beyond Internet artifacts, provide all evidence in a single consolidated report, and give the digital forensics professional a more complete view of user activity on a computer using a single search.

Read More (Magnet Forensics)