Articles Archives - Page 30 of 44

SQLite Database Forensics – ‘Sleep Cycle’ Case Study

12th May 20204th March 2015

Recently one of our users, Dan Saunders, was kind enough to write up his experience using the Forensic Browser for SQLite on a database that was not supported by any other forensics tools – this is his story: SQLite databases

Forensic Analysis of SQLite Databases: Free Lists, Write Ahead Log, Unallocated Space and Carving

12th May 202016th February 2015

SQLite is a widely popular database format that is used extensively pretty much everywhere. Both iOS and Android employ SQLite as a storage format of choice, with built-in and third-party applications relying on SQLite to keep their data. A wide

How Secure Is Your Password? A Friendly Advice from a Company That Breaks Passwords

12th May 20201st February 2015

by Vladimir Katalov A Practical Guide for the Rest of Us How many passwords does an average Joe or Jane have to remember? Obviously, it’s not just one or two. Security requirements vary among online services, accounts and applications, allowing

Using SQL as a date/time conversion tool

12th May 202019th January 2015

A few weeks ago I spent a little time looking at Triggers and to get to know them better I wanted to make use of them and so I knocked up a small application where if an integer is pasted

Forensics and Bitcoin

12th May 202016th January 2015

This article does not attempt to provide a beginners guide to Bitcoin, nor an in-depth thesis on Bitcoin forensics. Rather, it will be an overview of the potential opportunities available to digital forensics and traditional investigators to obtain evidence in

Investigation and Intelligence Framework (IIF) – an evidence extraction model for investigation

12th May 202029th November 2014

Authors Alan, Kelvin, Anthony and Zetta (VXRL) Disclaimer This framework was first introduced in DFRWS EU 2014 (the first DFRWS conference in Europe) at Amsterdam held in May and later presented at Hacks in Taiwan 2014 (HITCON) which is a

Extracting data from dump of mobile devices running Android operating system

12th May 202028th October 2014

In this article, we are going to tell about opportunities of utilizing programs that are used on a day-to-day basis in computer forensics and examination for analysis of mobile devices running Android operating system. Introduction Most of the mobile devices

Development of Digital Forensic Tools on Mobile Device, a Potential Area to Consider?

12th May 202019th October 2014

Case Study: MobileTriage – JPEG Metadata Triage – Automated Extraction of Information using Mobile Forensic Tools Background Mobile devices are now becoming part of our daily lives. These devices can now perform tasks or activities that were normally being processed

Can You Get That License Plate?

12th May 20208th October 2014

We find ourselves analyzing new surveillance videos almost every day, and in most cases we can either solve the problem very quickly or understand (even quicker) that there is no information to recover in the video. In special cases though,

How To Decrypt WeChat EnMicroMsg.db Database?

12th May 20201st October 2014

WeChat is a smartphone application where users can chat with their friends, share pictures, videos and audio chats. Users can also make free video calls and voice calls with their friends as long as they have Internet connection. Recently, we

A guide to RegRipper and the art of timeline building

12th May 202025th September 2014

Background I have often heard RegRipper mentioned on forums and websites and how it was supposed to make examining event logs, registry files and other similar files a breeze (the event logs and the other files isn’t per say examined

Recovering Evidence from SSD Drives in 2014: Understanding TRIM, Garbage Collection and Exclusions

12th May 202023rd September 2014

We published an article on SSD forensics in 2012. SSD self-corrosion, TRIM and garbage collection were little known and poorly understood phenomena at that time, while encrypting and compressing SSD controllers were relatively uncommon. In 2014, many changes happened. We

Why Offender Profiling is Changing Thanks to Mobile Forensics and Increasingly ‘Social’ Criminal Activity

12th May 202026th August 2014

by Yuval Ben-Moshe, senior director of forensic technologies at Cellebrite Mobile forensics has changed the methodology when it comes to offender profiling. The frequent use of mobile devices has provided investigators with another source for profiling criminal suspects, as well