±Forensic Focus Partners

Become an advertising partner

±Your Account


Forgotten password/username?

Site Members:

New Today: 0 Overall: 35503
New Yesterday: 0 Visitors: 118

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Webinars

Digital Forensics, Computer Forensics, eDiscovery

Griffeye 101: Analyze DI Pro Intro Course

Friday, May 17, 2019 (14:29:55)
Date: May 28, 2019
Time: 3 pm CEST (9 am EDT)
Registration: Click here

In this webinar, you will learn how Griffeye Analyze DI Pro can help you speed through cases involving massive amounts of pictures and videos.

Facebook’s Privacy Manifesto: What Does It Mean For Digital Forensics?

Thursday, May 16, 2019 (15:38:41)
by Christa Miller, Forensic Focus

Mark Zuckerberg’s new “privacy manifesto” for Facebook marks not just a pivot in terms of how the social network shapes modern-day communication. It also marks what The Verge’s Casey Newton called “the end of the News Feed era.”

Zuckerberg’s opening statement draws a distinction between the “digital equivalent of a town square” which Facebook and Instagram have helped to build over the past 15 years, and the “digital equivalent of the living room” in which more users prefer to spend time together. Most child exploitation domain experts would be quick to point out, however, that child abuse is far more pervasive in living rooms and other private spaces than it is in town squares.

Read More
  • Posted by: scar
  • Topic: News
  • Score: 0 / 5
  • (370 reads)

Is Signal Secure Enough?

Thursday, May 16, 2019 (15:36:51)
In today’s world everyone is using messenger applications. Many users prefer using messengers that have strong encryption built-in for obvious reasons from confidentiality to hiding data from investigators. One such app used by messengers due to the confidentiality and privacy they provide. Signal is one of these messengers and has been labeled one of the most widely used, next to Telegram, used by people living in regions known for corruption.

MSAB Gets Key Role In EU-funded FORMOBILE Consortium On Mobile Forensics

Thursday, May 16, 2019 (12:33:09)
May 15, 2019 – MSAB announced today that it has been selected to support the research and development efforts of the FORMOBILE Consortium, which is made up of 19 law enforcement, government, academic, and private sector organizations from across Europe. It is led by the Mittweida University of Applied Sciences. The goal of FORMOBILE is to establish a complete, end to end forensic investigation chain to support law enforcement agencies’ access to mobile device data.

Three primary objectives are being pursued:

1. Develop new tools and technologies to acquire previously unavailable mobile data, unlock mobile devices, and enable the decoding and analysis of mobile data.

2. Develop a new mobile forensics standard based on requirements defined by law enforcement

3. Develop training for the new standard and tools, to ensure consistency and high quality in investigations and mobile forensic analysis.

Forensic Focus Forum Round-Up

Thursday, May 16, 2019 (11:35:03)
Welcome to this month’s round-up of recent posts to the Forensic Focus forums.

Can you recommend a script for filling up NVMe storage drives with random data?

How do you find the date and time stamps of encrypted volumes mounted in Windows operating systems?

When you seize a computer, do you always check the BIOS time? Share your thoughts on the forum.

What tools would you recommend to acquire an image from a Macbook Pro?

Forum members discuss running digital forensic investigations on Windows and Ubuntu servers.
  • Posted by: scar
  • Topic: News
  • Score: 0 / 5
  • (2380 reads)

Webinar 101: A Crash Course In Successful Online Investigations

Thursday, May 16, 2019 (09:19:16)
Date: 2019-05-23
Time: 3 pm CEST (9 am EDT)
Speaker: Lovisa Högberg, Head of Business Development at Paliscope
Registration: Click here

Digital Forensics Challenge 2019

Monday, May 13, 2019 (09:05:59)
A new digital forensics challenge hosted by the Korean Institute of Information Security & Cryptology (KIISC), the Digital Forensics Challenge 2019 aims to expand knowledge of computer forensics and contribute to the field.

The challenge has two main categories: a Digital Forensics Challenge and a Tech Contest. Participants can take part in one or both competitions.

In the Digital Forensics Challenge, an answer sheet for each problem should be submitted with your detailed write-ups. There are five subcategories in this challenge: Anti-Forensics, Incident response, Mobile & Internet of Things, Artifact and MISC.

Each category contains five problems that are equivalent to 100, 200, 300, 400, or 500 score.

• 100-point problem: Problems that can be solved using known theories and tools
• 200-point problem: The theory is not as widely known as the 100 point problem, but it can be solved easily by knowing the principle
• 300-point problem: Problems requiring analysis know-how as they may be time consuming with known tools
• 400-point problem: Problems requiring new tool implementation. The solution is known to some extent, but it can not be solved by existing tools alone
• 500-point problem: Problems with an unknown solution
  • Posted by: scar
  • Topic: News
  • Score: 0 / 5
  • (4944 reads)

Register For Webinar: Mobile Device Investigator For Android And iOS

Friday, May 10, 2019 (14:35:55)

Join Digital Forensic Specialist and Trainer, Rich Frawley to learn about Mobile Device Investigator™ for Android and iOS.

Register here: https://www.adfsolutions.com/mobile-device-investigator-android-ios

BlackBag's MacQuisition 2019 R1: Decrypt Physical Images From Macs With T2 Chips

Thursday, May 09, 2019 (13:59:24)

BlackBag Technologies is proud to announce the release of the first and only solution to produce a decrypted physical image of the latest Mac systems utilizing the Apple T2 chip in MacQuisition 2019 R1. MacQuisition 2019 R1 also includes several exciting updates to support the latest Mac systems you may encounter in the field. Prior logical imaging solutions, including functionality available in the earlier versions of BlackBag’s own MacQuisition tool and competing solutions like Sumuri Recon and EnCase, miss critical file system information that only this new level of physical access will be able to provide. To enhance our forensic Mac imaging tool further, we've included the following new features:

- Ability to create physical images of Macs with the Apple T2 chip
- Support for imaging APFS Fusion drives
- Capture RAM and targeted collections live on Mojave
- Support added to boot newer hardware

GrayKey Integration And A New SQLite Viewer Come To Magnet AXIOM 3.1

Thursday, May 09, 2019 (12:52:10)
The innovation of Magnet AXIOM 3.0 continues with the release of Magnet AXIOM 3.1—which is now available to download!

In this release, we’re excited to have developed our exclusive technology partnership with Grayshift by integrating the loading of GrayKey images directly within AXIOM. We’ve also introduced a new SQLite viewer to give you better access when reviewing SQLite databases. And we’ve brought support for 12 Chromium-based browsers on Android—leading to 90 new supported artifacts.

On top of these new features, we’ve continued to build on the great new features of AXIOM 3.0, with new Mac artifacts and further enhancements to Cloud acquisition (including Facebook Warrant Returns and public Twitter acquisitions), Timeline, and media categorization.

If you’re not already using AXIOM and want try AXIOM 3.1 for yourself, request a trial today.