Automated Control Logic Forensics In Industrial Control Systems

Upon reading the title, the first few questions that might come to a reader’s mind are: what are Industrial Control Systems? Why are they important? How can an attacker attack them? What is control logic, engineering software, etc.? How does

25 Days, 25 Questions: Part 4 – Lab And Tool Standards

Editor’s note: This article concludes our four-part series written by Mr. Santosh Khadsare, our guest digital forensics expert from New Delhi, India, based upon his recent LinkedIn series, #25Days25Questions. More about Mr. Khadsare is in his bio below. On 18

Managing Mountains Of Evidence

One truism about digital forensics is that every case is different.  As the technology has evolved, we have had to come up with new and inventive ways to problem-solve and work around issues in both the mobile and computer forensic

Telling Digital Stories: Making Forensic Evidence Persuasive

Information, both substantive and temporal, gleaned through a forensic data investigation may be critically important to the issues in a legal case. Thanks to today’s technologies and investigative methods, this important evidence has never been as precise, accurate, effective, detailed,

How To Analyze Data From Azure VMs In Magnet AXIOM Cyber

Jamie McQuaid: Hello everyone, Jamie McQuaid from Magnet Forensics here with a quick video to show you how to do an Azure acquisition using Magnet AXIOM Cloud. So, we’ve got AXIOM up here ready to go. So I’m going to

25 Days, 25 Questions: Part 1 – Process And Practice

Digital forensic analysts are self-made through years of dedication to their area of specialization. Passion and patience are the key ingredients that make them good professionals. After successfully completing the 100 days of digital forensics quiz I thought that there

Nuix Investigate Power User Webinar

Charles: Hello everyone. Thank you for joining us for the Nuix Investigate power user webinar. My name is Charles Klein. I am product manager for Nuix Investigate, and I am joined today with my colleague Gareth Bernard, who is one

How To Expose Evidence Of Timestomping In Magnet AXIOM 4.4

Hey everyone, Tarah Melton here, and today I’m going to show you a new artifact that you can enable in AXIOM 4.4 when processing a Windows evidence item, called NTFS Timestamp Mismatch. This artifact is looking for a couple of

How To Use And Export Cloud Tokens With XRY

In this video, I’m going to show you how to download cloud tokens with XRY. This does require the XRY Cloud license to download them. You don’t get them without that license – as you can see here, I did