±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 3 Overall: 33332
New Yesterday: 3 Visitors: 218

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

RSS Feed Widget

±Latest Webinars

Page 243

Search on This Topic: News

[ Go to Home | Select a New Topic ]

Guidance Software Files For IPO

Saturday, September 16, 2006 (16:23:14)
Pasadena-based Guidance Software, a developer of software used for digital forensics, has filed for an IPO. Guidance, in an SEC filing Friday, said it is looking to raise up to $80M in an IPO on the Nasdaq under the symbol GUID...

More (socialTECH.com)

Cyber crime becoming more organised

Friday, September 15, 2006 (17:06:35)
Cyber scams are increasingly being committed by organised crime syndicates out to profit from sophisticated ruses rather than hackers keen to make an online name for themselves, according to a top U.S. official. Christopher Painter, deputy chief of the computer crimes and intellectual property section at the Department of Justice, said there had been a distinct shift in recent years in the type of cyber criminals that online detectives now encounter...

More (Scotsman.com)

URI to receive nearly $600,000 to improve forensic research

Thursday, September 14, 2006 (14:28:47)
In an effort to improve forensic research in Rhode Island, the U.S. Department of Justice has announced that the University of Rhode Island will receive $599,793 to purchase improved computer software technology. The money will be dispersed in two grants through the National Institute of Justice's Electronic Crime Research and Development Solicitation program...

More (PBN.com)
  • Posted by: jamie
  • Topic: News
  • Score: 0 / 5
  • (724 reads)

What it's like to be a computer forensics specialist

Wednesday, September 13, 2006 (14:31:29)
During his law enforcement days Harry Megerian got his hands on a lot of IT gear - by brute force. "We probably did a raid once a week or once every two weeks," says Megerian, a former computer forensics specialist with the U.S. Treasury Department. "I would walk away with five computers, on average." These days Megerian still scours computers for evidence, but he does it on a consultative basis...

More (Network World)

Forensic toolkit harvests cellphone data

Tuesday, September 12, 2006 (15:06:56)
A new breed of forensic tools, designed with the help of Whangarei-based Thackray Forensics, can now access and clone the full contents of a mobile phone or PDA within seconds. Managing director John Thackray is one of a handful of qualified instructors in the use of the .XRY toolkit worldwide and is the only qualified instructor in the Southern Hemisphere. Since the launch of the range of products from Micro Systemation (MSAB) he has trained specialists in government and corporate organisations including the FBI, the British Secret Service, Scotland Yard and the Italian police...

More (m-net)

TSK 2.06 and Autopsy 2.08 released

Monday, September 11, 2006 (15:23:43)
From Brian Carrier:

Major improvements for TSK are fixes for segfaults that were discussed on the mailing list, new versions of libewf and afflib that add support for the SMART format and that fix some compile bugs (respectively), and ... a first pass at a Windows version. The Windows port is not 100% complete. Support for EWF and AFF do not exist and "globbing" is not supported on the command line. But, it's a start. There is a zip file with the executables on the website. Autopsy will not work on Windows though (outside of Cygwin). The new Autopsy version includes the update that will check if it is running on Cygwin and will then set the path to '/bin;/usr/bin;/usr/local/bin' (so that the dlls can be found).

http://www.sleuthkit.org/

New Sleuthkit Windows Executables Release

Monday, September 11, 2006 (15:02:35)
From Brian Carrier:

The Windows executables that were released last week did not run on
everyone's systems. A second release is out that uses different compile
options.

http://www.sleuthkit.org/sleuthkit/download.php

Computer Forensic Examiners Lead the Way on Assistance to Those in Need

Monday, September 11, 2006 (14:45:12)
As expert members of the international computer forensics community which provides unique and highly desirable services to the legal system, we assume a responsibility to provide services to those in need yet unable to pay. As a result, the Computer Forensics Volunteer Project (CFVP) provides pro bono and low-cost forensic services to individuals and organizations who normally would not be able to take advantage of the distinct litigation advantage provided by these techniques...

Mobile spy software use almost always illegal, says expert

Monday, September 11, 2006 (00:06:05)
A piece of software which allows a user to track another person's mobile phone use would be almost impossible to use in the UK without breaking the law, according to a surveillance law expert. Flexispy is the controversial software which is being sold by Thailand and UK based Vervata. Vervata's Flexispy.com site says that it is the "world's most powerful spy software for mobile phones"...

More (Out-Law.com)
  • Posted by: jamie
  • Topic: News
  • Score: 0 / 5
  • (1166 reads)

Acquire ewf images with ewfacquire on MacOSX/Freebsd/OpenBSD/Linux

Monday, September 11, 2006 (00:02:01)
Besides reading and writing (EnCase) EWF files with the libewf library, it's now possible to read and write SMART images as well. With the ewfacquire tool you now can create a bit-copy image from devices in the SMART image format (s01). The ewfacquire tool supports reading devices in Linux, FreeBSD, NetBSD, OpenBSD, MacOS-X/Darwin. On other platforms (Windows/Cygwin) it can convert a raw (dd) image into a EWF file or SMART file. With the tool you can acquire disk images just like in Encase or FTK and save the same meta data and hash value within the EWF or SMART file.

Usage ewfacquire:
./ewfacquire /dev/hda

The libewf library is integrated within the Sleuth Kit and so are the other tools. The libewf library comes with other tools to export data from EWF or SMART files (ewfexport), show the meta data stored in the EWF or SMART file (ewfinfo), and verify the integrity of the EWF or SMART files (ewfverify)

You can download the source code on the project website:

https://www.uitwisselplatform.nl/projects/libewf/
  • Posted by: jamie
  • Topic: News
  • Score: 0 / 5
  • (944 reads)