±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 30665
New Yesterday: 1 Visitors: 72

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News   Forums   Articles

±Latest Articles

RSS Feed Widget

2016

Reviews

2016


2016

Registry Recon

Reviewed by Cheryl A. Purdy, MBA, A+, CCNA, CCAI, ACE, AME

Executive Summary

Registry Recon, developed by ArsenalRecon, is a powerful computer forensics tool used to extract, recover, and parse registry data from Windows systems. The process of manually scouring Windows Registry files proves to be extremely time consuming and leaves gaping holes in the ability to recover critical information. What makes this tool superior to others is its capability to examine registry files not only from the current installation of a Windows operating system, but former installations as well. In addition, this application can be used to quickly and efficiently determine external devices that have been connected to the computer. The company’s slogan is, “Computer forensics tools by computer forensics experts.” This tool certainly affirms the slogan!   more ...

2016

Nuix Foundations - Investigations Training, London

Reviewed by Scar de Courcier, Forensic Focus

On the 21st and 22nd of March 2016, Nuix ran a Foundations Investigations Training course in London to introduce forensic examiners to Nuix 6.2.7. The course was aimed at people who were new to the software, and took participants through all aspects of investigations from a basic level upwards.   more ...

2016

Cellebrite's UFED Cloud Analyzer Product Review

Reviewer: Neil Beet, Blue Lights Digital

Introduction

The Cellebrite UFED Series has been our mobile device forensics product of choice over the past few years, both in the law enforcement environments we previously operated in, and now at Blue Lights Digital where we conduct complex digital investigations on behalf of our clients whether criminal, civil or corporate. We have found that when performing both roles, the products have proved good value for money, are simple to use and remain focused on the investigative need throughout.

Where we have been continually challenged throughout our investigations is in the field of Cloud Forensics, where clients are seeking to obtain information that is not available within the device downloads but that a user would routinely have had access to and be authenticated to do so on their mobile device. Examples of such data include web based email accounts, instant messaging services and social media networks.   more ...

2016

Lima Forensic Case Management, Laboratory Edition

Reviewer: Richard Bunnell, Digital Forensics, LLC

Executive Summary

Lima Laboratory is an amazing product. If I was on a medium to large digital forensics team, I would not hesitate to recommend that this product be purchased and used. A good selling point would be the compliance with the international standards ISO 9001, ISO 27001 and ISO 17025 and US Standards such as ASCLD accreditation. One of the goals for us when I worked in a large corporate environment was to bring the lab up to these standards. We had two obstacles: finding the time to research how the standards applied to us, and then actually setting goals to move from where we were to processes and procedures that would meet the standards. With this product, most of that work is already done.   more ...

2016

Cellebrite Certified Mobile Examiner Training and Certification

Reviewed by Clark Walton

In January 2014, I took both the Cellebrite Certified Logical Operator (CCLO) and Cellebrite Certified Physical Analyst (CCPA) trainings in a one-week course held in Washington, DC and taught by Cellebrite Certified Instructor, Joe Duke. The CCLO and CCPA are required predicates for Cellebrite Certified Mobile Examiner (CCME) certification, Cellebrite’s “capstone” forensic examiner certification. The course trains investigators and examiners to perform file system extractions, physical extractions, password bypasses and the advanced analysis of evidentiary items using the UFED Physical Analyzer software.   more ...