Articles

BYOB To A CTF To Improve Your DFIR Game

Even before COVID-19 drove homebound digital forensics examiners to seek out new modes of training and skill-building, Capture the Flag (CTF) challenges were a popular feature at numerous conferences. Now offered in virtual formats both during and outside of conferences,

How To Review Text Chats With Nuix Investigate

Today we’re going to take a look at how to review chat messages in Nuix Investigate, and the different viewing options. We currently have all the items retrieved through the grid, and we’re going to utilise the search filters on

How To Create A Full Forensic Image With Nuix Enterprise Collection Center

Nuix Enterprise Collection Center empowers ediscovery, digital forensics, and cybersecurity practitioners alike. Investigators are able to make a full forensic image, automated through the use of a simple collection wizard. After providing a case name, investigators are then able to

Day-To-Day Challenges In Digital Forensics

All occupations face daily challenges. Many of these challenges come from dealing with the public, while some are more problem-solving challenges. In digital forensics, we face challenges on both ends of this spectrum because ultimately our jobs affect lives. Whether

Digital Forensics Standards: Recent News And Research

The global COVID-19 pandemic hasn’t slowed either the pace of technological change or its relevance to both criminal and civil investigations. Both fraud and child exploitation are examples of crimes that have increased since much of the world went on

How To Use Annotations In Amped Replay

Some of you may be aware of Amped Replay, but for those who are not, Replay can be considered the VLC (and much more!) for investigators. It was designed to make the life of investigators easier by providing them with

How To Perform An Android 10 Full File Extraction With MD-NEXT

New release: MD-NEXT v.1.89.5  Full filesystem extraction is available for Samsung Galaxy S10/Note10 Series (Exynos) with Android 10 (FBE enabled), and this will support the Samsung Secure Folder. Check out the video! If you have any questions, feel free to

Recent Research In Digital Forensics

Despite pandemic-related disruptions in both research and publishing as we head into the summer, there are still some posts and papers being published. In this round-up, we take a look at three recent articles in digital forensics. An Evaluation of

Virtualizing The Digital Forensics Lab

When the spread of COVID-19 spurred businesses and governments to close their doors and require employees to work from home, questions arose for those working in the criminal justice system. Operations couldn’t end, but to what extent would they be

Put Your Lab’s Existing Tools And Processes To Work — For Science

Digital forensic tools rely on the National Institute of Standards and Technology (NIST)’s National Software Reference Library (NSRL), the standard reference dataset, to filter out known software and images from unknown ones. Forensic examiners, judges, and attorneys rely on NIST’s

Mitigating Risk Through Standardization

A recap of Dr Gillian Tully’s DFRWS EU keynote. By Christa Miller, Forensic Focus No one denies that digital forensics is becoming more complex. The range of devices to examine keeps increasing, as does the complexity of acquiring and analyzing

MSAB XAMN

You’ve already extracted data from a mobile device, you’re up against the clock and you’re trying to analyze large amounts of mobile device and app data. Where do you start?  Join us for a 30-minute free webinar and learn smart

How To Extract Data From Samsung Galaxy S9 / Android 10 With MD-NEXT

In this video, we will introduce ‘Bootloader Pro’ extraction method which is capable of extracting Android 10 installed Samsung devices. Currently, MD-NEXT supports Galaxy S9(SM-G960N, SM-G960F)/Galaxy S9+(SM-G965N, SM-G965F)/Galaxy Note 9(SM-N960N) with Exynos chipset. If you have any further inquiries, contact