±Forensic Focus Partners

Become an advertising partner

±Your Account


Forgotten password/username?

Site Members:

New Today: 0 Overall: 33647
New Yesterday: 5 Visitors: 283

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

RSS Feed Widget

±Latest Webinars

Page 3

Search on This Topic: News

[ Go to Home | Select a New Topic ]

When It Comes To Training, Quality Absolutely Matters!

Thursday, March 01, 2018 (11:13:19)
By: Danny Garcia, Senior Director of Certification and Learning Technology | CFCE CCME CCPA CCO

I can look back and say with confidence that I have made a difference in the quality of training programs delivered throughout my tenure for numerous organizations since 2008. However, it was not until I started as a contract trainer with Cellebrite in 2013 that I knew I could make a substantial difference in what is taught in this space. Since joining Cellebrite's Global Training Division team, I have been part and parcel in identifying, repairing and improving the quality of curriculum and our certification courses.

If you do not know, you do not know!

Video: Force Open - Lightweight Black Box File Repair

Wednesday, February 28, 2018 (10:25:56)
Karl Wust discusses his research at DFRWS EU 2017.

Wust: Hi everyone. My name is Karl Wust, and I’m a security researcher from ETH Zurich, and the work that I present here is joint work with Petar Tsankov, Sasa Radomirovic, and Mohammad Torabi Dashti.

Usually, when we open a file – if we open an image file, for example – we expect something like this. The [file viewer] pops up and shows us the image that we want to see, in this case, a nice photo of Zurich. But sometimes, files get corrupted, for different reasons – transmission errors, [degradated] storage, or some other reasons. And in some cases, we can still open the image, but it will look something like this. So we get some artefacts here. In this case, we have some part of the image that is on the bottom right that should actually be on the bottom left.

Read More
  • Posted by: scar
  • Topic: News
  • Score: 0 / 5
  • (545 reads)

Digital Forensics News February 2018

Monday, February 26, 2018 (16:04:37)
Compelson have released the latest version of MOBILedit Forensic Express.

Free Android Forensics takes a deep-dive into an app.

Registration is now open for the Magnet User Summit 2018.

Eric Huber introduces a new series of blog posts about moving from LE to the private sector.

BlackBag's MacQuisition 2018 R1 now comes with 120GB SSDs as standard, and a 1TB SSD option is soon to be released.

Brett Shavers talks about why it's so important to be able to write good reports in DFIR.

Cellebrite have released version 7.1 of their UFED products.

Hashcat v4.1.0 has been released.

Forensic Focus readers can get 30% off the registration fee for TechnoSecurity by using the code FFOCUS18 at the checkout.

Adam Harrison has written a useful post on rebuilding RAID in EnCase 7/8.
  • Posted by: scar
  • Topic: News
  • Score: 0 / 5
  • (880 reads)

BlackBag Offers New MacQuisition Device Sizes to Provide Supersized Imaging

Monday, February 26, 2018 (12:50:13)
With a faster drive, supersized imaging capability, and the latest features in MacQuisition 2018 R1 (including enhanced Apple File System support), BlackBag's MacQuisition offers digital examiners the very best forensic imaging solution for Mac OS X and macOS.

Forensic Focus Forum Round-Up

Monday, February 26, 2018 (10:09:50)
Welcome to this month’s round-up of recent posts to the Forensic Focus forums.

How would you find credit card numbers using EnCase?

Forum members help to locate network history and VPN profiles.

How would you image and examine a Chromebook? Share your thoughts on the forum.

Can you help loonaluna to recover data from a deleted TrueCrypt container?

What kind of malware do you think has been used on this machine?

How would you extract data from .img files from a Sony VAIO backup?

Is it possible to virtualise Mac on Windows, and if so, how would you do it? Add your thoughts on the forum.

Forum members discuss reading and migrating Microsoft Word 4.0 files.
  • Posted by: scar
  • Topic: News
  • Score: 0 / 5
  • (698 reads)

Using Technology To Get Results: Accumulated Knowledge

Friday, February 23, 2018 (12:40:29)
Over three articles, Griffeye known for its Analyze platform for collecting, processing, analyzing, visualizing and managing images and videos, explores the challenges and opportunities law enforcement face due to the sheer volume of data in digital media investigations. Not least showing how technology can help us get better results, quicker. This first article addresses accumulated knowledge and its value.

Bruteforcing Linux Full Disk Encryption (LUKS) With Hashcat

Thursday, February 22, 2018 (11:24:03)
by Patrick Bell

This walk-through will show you how to Bruteforce LUK volumes using hashcat, how you can mount a LUK partition, and how we can image it once it’s decrypted.

Scenario: You’ve got a Macbook in. MacOS has been removed and Debian 9.0 has been installed. The suspect is using LUKS (Linux Unified Key Setup) full disk encryption to encrypt the disk. Password is unknown and we need a forensically sound method to access the data. This is how I’d do it.

Read More
  • Posted by: scar
  • Topic: News
  • Score: 0 / 5
  • (2420 reads)

UFED And UFED Physical Analyzer 7.1 Solves Encryption And Unlocking Challenges

Wednesday, February 21, 2018 (11:22:43)
Overcome your toughest challenges with powerful decryption and unlocking capabilities

Obtain even more evidence from hundreds of locked and encrypted devices with unique and powerful capabilities.

Don’t let encrypted and locked devices hold back your investigations. UFED and UFED Physical Analyzer 7.1, provide you with the only solution to access, share and report evidence from the widest variety of digital devices.

Register Now For Techno Security & Digital Forensics Conference

Tuesday, February 20, 2018 (10:55:49)
Register now for Techno Security & Digital Forensics Conference and receive 30% off early-bird rates!

Join the industry for Techno Security & Digital Forensics Conference taking place June 3-6, 2018 at the Marriott Resort at Grande Dunes in Myrtle Beach, SC. This brand has grown into one of the most important resources for corporate network security professionals, federal, state and local law enforcement digital forensic specialists, and cybersecurity industry leaders from around the world.

The 2018 event will feature 90+ speakers, 80+ sessions, and 55+ sponsors/exhibits over four days of networking among 1,000 cybersecurity and digital forensics industry professionals.

Primary topics include Audit/Risk Management, Forensics (digital/mobile), Investigations, Information Security, Cellebrite Lab, and Magnet Forensics Lab.

Connect with leading suppliers, explore the latest tools, and discover solutions to challenges in cybersecurity and digital forensics.

Special Registration Offer: Receive 30% off registration rates with Promo Code FFOCUS18. Register before March 30th to receive the early-bird registration rate AND the additional 30% off!

For full details and to register, visit www.TechnoSecurity.us.
  • Posted by: scar
  • Topic: News
  • Score: 0 / 5
  • (877 reads)

Interview With Nick Sharples, Senior Solutions Consultant, Nuix

Monday, February 19, 2018 (13:24:50)
Nick, can you please tell us a bit about yourself and your background; what does a day in your life look like?

A ‘regular day in the office’ starts early, the alarm goes in my house at 5am so I can get to the gym for an hour before jumping on the train to London. I am relatively new at Nuix and I am still learning the different capabilities of each product, so I tend to use the time on the train to pick up a product I’ve not used before to see what it can do or how to install and configure it. I also use the time to catch up with emails from my colleagues in the Solutions Consultants (SC) Team, or brush up on my programming skills.

Read More
  • Posted by: scar
  • Topic: News
  • Score: 0 / 5
  • (907 reads)