Articles Archives - Page 28 of 44

Digital Forensic Investigational Tool For Volatile Browser Based Data Analysis in Windows 8 OS

12th May 202022nd December 2016

by W.Chirath De Alwis, School of Computing, Asia Pacific Institute of Information Technology, Colombo, Sri Lanka Abstract Cyber security threats on sensitive resources have increased recently and it has increased the need for digital forensic analysis tools. Digital evidence can

The Ugly Side of Two-Factor Authentication

12th May 202020th December 2016

by ElcomSoft Two-factor authentication is great when it comes to securing access to someone’s account. It’s not so great when it gets in the way of accessing your account. However, in emergency situations things can turn completely ugly. In this

New Federal Rule of Evidence to Directly Impact Computer Forensics and eDiscovery Preservation Best Practices

22nd February 202319th December 2016

by John Patzakis, X1 A key amendment to US Federal Rule of Evidence 902, in the form of new subsection (14), will go into effect on December 1, 2017. This amendment will significantly impact eDiscovery and computer forensics software and

Attributing A Third Party To A Recovered (Deleted) IOS SMS Message

12th May 202028th November 2016

In a recent forensic case involving recovered deleted sms messages from an sms.db file on an IOS mobile device none of the mainstream mobile phone forensic software made the link between sender and recipient for the recovered records of interest.

Forensic Implications of iOS Lockdown (Pairing) Records

12th May 202014th November 2016

by ElcomSoft In recent versions of iOS, successful acquisition of a locked device is no longer a given. Multiple protection layers and Apple’s new policy on handling government requests make forensic experts look elsewhere when investigating Apple smartphones. In this

Touch Screen Lexicon Forensics (TextHarvester / WaitList.dat)

12th May 20203rd November 2016

By Barnaby Skeggs Preamble Since the release of Windows 8, and the ‘Metro’ interface, touch screen input has been implemented in a rapidly rising number of Windows devices including Microsoft Surface Pro/Book, 2-in-1s, convertible laptops and tablets. Microsoft has catered

Malware Can Hide, But It Must Run

12th May 202027th October 2016

by Alissa Torres, SANS Certified Instructor It’s October, haunting season. However, in the forensics world, the hunting of evil never ends. And with Windows 10 expected to be the new normal, digital forensics and incident response (DFIR) professionals who lack

The “I’ve Been Hacked” Defence

12th May 202024th October 2016

By: Yuri Gubanov, Oleg Afonin (C) Belkasoft Research, 2016 Abstract This article was inspired by an active discussion in one of the forensic listservs. Original post was asking on how to fight with an argument “This is not me, this

10 DFIR Blogs You Don’t Want to Miss

12th May 202020th September 2016

by Christa M. Miller Digital forensics is a tough job. Forensicators must evolve as rapidly as the technology does, which means being in a constant state of learning. Formal education is costly and can’t keep up. The next best alternative:

Meeting A Forensic Challenge: Recovering Data From A Jolla Smartphone

12th May 202014th September 2016

by Davide Gabrini, Andrea Ghirardini, Mattia Epifani and Francesco Acchiappati Preface During the hacking camp MOCA 2016, at the end of a talk held by Davide “Rebus” Gabrini on passcode circumvention methods on mobile devices, a bystander offered an intriguing

Hiding Data from Forensic Imagers – Using the Service Area of a Hard Disk Drive

12th May 202022nd July 2016

By Todd G. Shipley and Bryan Door (A complete copy of this white paper and its figures, images and diagrams can be found at www.nfdrtc.net). I. Summary Kaspersky Labs® recently released their research regarding the compromise of hard disk drive

How to Stop Worrying and Learn to Love Your Inner Impostor

22nd February 20234th July 2016

by Christa M. Miller It’s pretty much impossible to work in a small, niche community like DFIR and not eventually rub elbows with a rock star. You go to a conference and get to talking with someone, and you don’t

SSD and eMMC Forensics 2016 – Part 3

12th May 20207th June 2016

What Has Changed in 2016 in the Way SSD Drives Self-Destruct Evidence: Demystifying eMMC, M.2, NVMe, and PCI-E. by Yuri Gubanov & Oleg Afonin © Belkasoft Research 2016 In the previous part of the article, we talked about eMMC storages

Current Challenges In Digital Forensics

12th May 202011th May 2016

What is the most urgent question facing digital forensics today? That in itself is not a question with a straightforward answer. At conferences and in research papers, academics and forensic practitioners around the world converge to anticipate the future of

SSD and eMMC Forensics 2016 – Part 2

12th May 20204th May 2016

What Has Changed in 2016 in the Way SSD Drives Self-Destruct Evidence. Demystifying eMMC, M.2, NVMe, and PCI-E. by Yuri Gubanov, Oleg Afonin © Belkasoft Research 2016 In the first part of this article, we reviewed different kinds of the

The Investigative Challenges Of Live Streamed Child Abuse

12th May 20202nd May 2016

Among the challenges facing digital forensic investigators today, the instantaneous nature of online communication is arguably one of the most persistent. Trying to investigate whether a crime has occurred, and if so to bring its perpetrators to justice in a