Articles

25 Days, 25 Questions: Part 1 – Process And Practice

Digital forensic analysts are self-made through years of dedication to their area of specialization. Passion and patience are the key ingredients that make them good professionals. After successfully completing the 100 days of digital forensics quiz I thought that there

Nuix Investigate Power User Webinar

Charles: Hello everyone. Thank you for joining us for the Nuix Investigate power user webinar. My name is Charles Klein. I am product manager for Nuix Investigate, and I am joined today with my colleague Gareth Bernard, who is one

How To Expose Evidence Of Timestomping In Magnet AXIOM 4.4

Hey everyone, Tarah Melton here, and today I’m going to show you a new artifact that you can enable in AXIOM 4.4 when processing a Windows evidence item, called NTFS Timestamp Mismatch. This artifact is looking for a couple of

How To Use And Export Cloud Tokens With XRY

In this video, I’m going to show you how to download cloud tokens with XRY. This does require the XRY Cloud license to download them. You don’t get them without that license – as you can see here, I did

How To Use The Magnet Web Page Saver

Hey everyone, Tarah Melton here, and today we’re going to walk through a workflow that you can use alongside a new artifact in AXIOM 4.4 that will help you present data output from Magnet’s free too, the Magnet Web Page

How To Find Location Data From Pictures In XAMN

Welcome to this XAMN feature demonstration video. In this video I will show the use of XAMN filters to find images containing location information, this being longitude, latitude or even both. I will also demonstrate how to create a pivot

Somebody Else’s Hero: Mental Health In Digital Forensics

Impostor syndrome is a common topic on LinkedIn and other professional online career communities, but it seems especially poignant among digital forensics analysts, who frequently work 9-5 Monday to Friday viewing things that no human eye should ever have to

DFIRforGood Is A Great Start: Let’s Use It To Ask Tougher Questions

In recent weeks the DFIR community has increasingly begun to speak out under the hashtag #DFIRforGood following conference presentations by leaders in digital forensics and information security. In a keynote delivered at the SANS DFIR Summit in July 2020, Matt

Digital Forensics Standard-Setting: Summer 2020 Round-Up

The summer has been a busy one for standards-setting organizations in the United States and European Union: In the U.S., the National Institute of Standards and Technology (NIST) published its final guidelines for cloud forensics, along with a document towards

Qualifying A Digital Forensic Expert In Court (Voir Dire)

Most digital forensic practitioners possess an analytical mind.  One of the reasons we become interested in the field is because we work to whittle down the digital elements of the case to try and present a clearer picture of the

Case Study: Digital Evidence Confirms Players In Major Bitcoin Heist

Traditional policework helped track down the thieves targeting cryptocurrency data centers in Iceland, but digital intelligence from one suspect’s mobile devices provided the proof of their involvement. Date: 2018Challenge: To connect six suspects to the theft of more than $2M

Digital Forensic Evidence And Artifacts: Recent News And Research

This month’s academic research reflects two aspects of the changing digital forensics industry: new ways to think not just about digital artifacts, but also about broader investigative processes — including interagency cooperation. This round-up article includes three open-access articles from

How To Bulk Tag Evidence With Nuix Investigate

Today I’m going to show you how to do a bulk tagging operation using Nuix Investigate 8.2.1. Here on the far left side – you can see we’re on our Cases landing page – we’re going to scroll down the