Articles

Forensic Focus Legal Update: The COVID-19 Edition

When employers worldwide instituted remote-work policies to help reduce the spread of the novel coronavirus COVID-19, the impact to entire criminal justice systems — from law enforcement to evidence processing through the courts — was profound. Digital evidence examiners in

So You Want To Start A Digital Forensic Business

by Patrick Siewert Pro Digital Forensic Consulting is about to embark on its seventh year in full-time operation. It’s hard to believe that when I made the decision to transition from law enforcement to the private sector, my little company

Industry Roundup: Online Digital Forensics Training

by Christa Miller, Forensic Focus  Online digital forensics training has been around for a number of years, offered as a convenient alternative to in-person training for examiners who couldn’t travel or were otherwise resource-constrained. In an unforeseen twist, though, live

How To Collect Data Using MacQuisition Live

As more employees are required to work from home, we’ve heard from our customers that they need the ability to remotely collect data from Mac systems without having to send MacQuisition hardware to someone’s home. In order to help our

How To Decrypt WhatsApp Messages With Oxygen Forensic Detective

Welcome to Oxygen Forensic Detective’s Knowledge Nuggets. In this video we’re going to discuss decrypting WhatsApp messaging. Let’s go over a few very important points that you need to consider before analyzing WhatsApp.  Number one: always place the device in

How To Acquire Cloud Data With MD-CLOUD

‘17.5 Zettabytes.’ This is the amount of data that the IDC estimates will be generated annually by 2025, and among those numbers, cloud traffic is expected to grow and reach 18.9 Zettabytes by 2021. This tremendous amount of cloud data

Everything You Ever Wanted To Ask About Checkm8 And Checkra1n

by Oxygen Forensics  What’s Checkm8? Checkm8 is an exploit (program exploiting OS or hardware vulnerabilities) aimed at obtaining access to the execution of its own software code at the earliest stage of iOS device loading. What makes it stand out?

Chromium-Based Microsoft Edge From A Forensic Point Of View

by Oleg Skulkin & Svetlana Ostrovskaya Recently Microsoft finally released the Chromium-based version of Edge Browser, so it seems we’ll miss ESE databases soon (not). Of course, it may have a similar set of forensic artifacts to Chromium or Chrome,

Forensic Pattern Of Life Analysis

by Christa Miller, Forensic Focus Pattern of life analysis isn’t a new concept to anyone who’s ever been involved with intelligence, in particular surveillance.  It’s all about the habits that people — suspects, persons of interest, crime victims, or those

NIST Tests Forensic Methods For Getting Data From Damaged Mobile Phones

by Richard Press Criminals sometimes damage their mobile phones in an attempt to destroy evidence. They might smash, shoot, submerge or cook their phones, but forensics experts can often retrieve the evidence anyway. Now, researchers at the National Institute of

Industry Roundup: Cloud Forensics

by Christa Miller Only a few short years ago, the idea of recovering forensic data from the cloud seemed like either troubling overreach, or unnecessarily redundant given the availability of evidence from mobile devices. As encryption became more prevalent on

How To Analyze Call Data Records In Oxygen Forensic Detective

Hi, this is Amanda Mangan with Oxygen Forensics. In this video, we’re going to go over Oxygen Forensics’ Call Data Expert. The first thing we’ll discuss is, what exactly is a CDR? A CDR is a call data record, and