Forensic Focus

Trace Malware's steps with RE:Trace

Fri, 09 May 2008 10:41:23 GMT

Reverse engineering is regarded as one of the most difficult specialties in the hacker community. The deconstruction and analysis of software and systems to understand their inner workings is a complex task. It requires a thorough understanding of kernel functions, knowledge of machine code and experience using disassemblers. While a number of reverse engineering tools exist, a modification of tracing tool DTrace has led to the creation of the robust reverse engineering framework known as RE:Trace... More (SearchSecurity)

Computer Forensics Lab Awarded to New Mexico

Thu, 08 May 2008 11:28:32 GMT

The FBI announced recently that the state of New Mexico, in conjunction with the UNM Police Department, UNM Information Technology Services Department (ITS) and the NSA-certified UNM Anderson School of Management’s Center for Information Assurance Research and Education (CIARE), has been awarded the nation’s 15th Regional Computer Forensics Laboratory (RCFL). The NM RCFL will be a full-service digital forensics laboratory and training center devoted entirely to the examination of digital evidence in support of local, state, and federal criminal investigations... More (UNM Today)

LTU Technologies Releases LTU-Finder 3.0 at CEIC

Wed, 07 May 2008 10:05:31 GMT

LTU Technologies has announced the release of LTU-Finder v. 3.0, a tool for image and video recognition in the field of computer forensics. LTU-Finder 3.0 was unveiled at Guidance Software’s Computer and Enterprise Investigations Conference (CEIC) in Las Vegas, Nevada. Offered as a trusted plug-in to Guidance Software’s EnCase®, LTU-Finder reduces the time required to identify and review relevant image and video files collected during a digital investigation. Likewise, to help users obtain relevant reference data LTU is authorized to share the CP “DNA” reference set of a major Federal law enforcement agency...

Microsoft slowly seals its lips about its police toolkit

Tue, 06 May 2008 08:25:42 GMT

To put a lid on bloggers' speculation about police getting "backdoors" to Windows security, Microsoft is starting to hush up on the subject. In an e-mail to BetaNews on Friday, a spokesperson described COFEE as a "customizable framework." Despite releasing a few more facts on Friday about a controversial new tool for police officers, Microsoft has now vowed to stay mum on the "exact methods" used by COFEE (Computer Online Forensic Evidence Extractor), as well as about what kinds of passwords -- OS or network, for example -- COFEE might be able to crack... More (BetaNews)

OU tackles computer forensics

Mon, 05 May 2008 12:58:33 GMT

Fears of corporate espionage, malicious staff and disputed trade deals has led to the Open University's first course on computer forensics to be heavily oversubscribed. The post-graduate Computer Forensics and Investigations course starts today, and prospective students have been bumped to the November 2008 course since March... More (vnunet.com)

'Extreme Porn' Law Could Criminalise Millions in UK

Thu, 01 May 2008 14:33:30 GMT

Almost unreported, the UK Criminal Justice Bill is slowly wending its way toward becoming law. It includes a section (Clause 63) on "extreme pornographic images" that may, or may not, affect a very large proportion of the adult population in the UK. But that – the Bill's uncertain scope – is part of the problem... More (The Register)

COFEE (Computer Online Forensic Evidence Extractor)

Thu, 01 May 2008 14:32:13 GMT

Microsoft has reportedly developed a USB key that allows investigators to extract forensic data from PCs. COFEE (Computer Online Forensic Evidence Extractor) comes in a USB key form factor, and was distributed to a small number of law-enforcement agencies last June, the Seattle Times reports. The device includes 150 tools that allow investigators to extract internet history files, for example, or "decrypt passwords". ... More (The Register)

New forensic lab opened at the University of Teesside (UK)

Mon, 28 Apr 2008 10:15:50 GMT

A new laboratory for the training of CSIs has been opened at the University of Teesside. The new Digital Evidence Laboratory was opened by Andrew Rennison, the Home Office’s forensic science regulator. Angus Marshall, senior lecturer in forensic science at the university said: “The facility should not be viewed as a student only domain and can be used for research and supporting police forces and other organisations with their training and case work investigations.” Source (Gazette Live)

Guidance Software Hosts 8th Annual Digital Investigation Technology Conference

Fri, 25 Apr 2008 11:43:51 GMT

Guidance Software Inc. will once again bring together professionals from around the world to learn about the latest advancements in the field of digital investigations at the eighth annual Computer and Enterprise Investigations Conference (CEIC). The event takes place next week between April 27 and 30 at Loews Lake Las Vegas Resort...

4-Day Hacking BootCamp for Investigators

Thu, 24 Apr 2008 08:32:53 GMT

WetStone Technologies, Inc. now has a 4-day, hands-on, BootCamp focused on those investigating malicious software as it pertains to the hacking process. This class is structured with cyber-safe lab environments where students experience various types of cyber weapons and the latest investigation techniques to uncover and defend against cyber attacks. More (WetStone)