Forensic Focus

Ken, you're CEO at BlackBag. Tell us about your role: what does a day in your life look like? We have a great leadership team here at BlackBag, with decades of experience in our industry, and I spend a lot

by Arman Gungor Internal Date is an IMAP Message Attribute that indicates the internal date and time of a message on an IMAP server. This is a different timestamp than the Origination Date field found in the message header and

The Forensic 4:Cast Awards results have been released, with Forensic Focus winning Blog of the Year and Resource of the Year. Thank you to everyone who voted! Magnet Forensics have released a new ebook looking at how to run child

by Asanka Sayakkara, Nhien-An Le-Khac & Mark Scanlon Digital forensics is a fast-growing €field involving the discovery and analysis of digital evidence acquired from electronic devices to assist investigations for law enforcement. Traditional digital forensic investigative approaches are o‰ften hampered

Welcome to this month’s round-up of recent posts to the Forensic Focus forums. Tootypeg has created a flow chart for digital forensic investigators to use when making decisions about their cases – add your thoughts on the forum. What are

by Quan Le, Oisín Boydell, Brian Mac Namee & Mark Scanlon Current malware detection and classification approaches generally rely on time consuming and knowledge intensive processes to extract patterns (signatures) and behaviors from malware, which are then used for identification.

by Felix Anda, David Lillis, Nhien-An Le-Khac & Mark Scanlon In today’s world, closed circuit television, cellphone photographs and videos, open-source intelligence (i.e., social media/web data mining), and other sources of photographic evidence are commonly used by police forces to

Reviewed by Scar de Courcier, Forensic Focus SQLite forensics is an important part of many digital forensic investigations. Most smartphones and computer operating systems use SQLite, with each device often including hundreds of databases. Despite this extreme proliferation, SQLite forensics

by Scar de Courcier This article is a recap of some of the main highlights from the Techno Security & Forensic Investigation Conference 2018, which took place in Myrtle Beach, SC from the 3rd-6th June 2018. Under the sunny skies