Forensic Focus

The explosion and volume of digital images and videos captured by CCTV, smartphones, tablets, digital cameras, body worn cameras, and dash cams presents significant challenges to analysts, investigators, and forensic examiners. In this webinar, students will learn about: – Pre-categorization

A new webinar, How The Onset Of Security Apps Is Impacting Investigations, is available to view here. Join Jessica Hyde, Director of Forensics at Magnet, for a look into vault and security apps with a focus on Cheetah Mobile apps

It was not too long ago when drones were discussed we would often think of military use or large commercial type applications. However, today drones are now in the hands of hobbyists who frequently use the devices for taking aerial

Daniel Spiekermann discusses his research at DFRWS EU 2017. Spiekermann: I would like to present a paper of digital investigation in OpenFlow networks with ForCon. I am a PhD student at the FernUniversitat in Hagen and the topic of virtual

by Chirath De Alwis Forensic Toolkit or FTK is a computer forensics software product made by AccessData. This is a Windows based commercial product. For forensic investigations, the same development team has created a free version of the commercial product

Karl Wust discusses his research at DFRWS EU 2017. Wust: Hi everyone. My name is Karl Wust, and I’m a security researcher from ETH Zurich, and the work that I present here is joint work with Petar Tsankov, Sasa Radomirovic,

Compelson have released the latest version of MOBILedit Forensic Express. Free Android Forensics takes a deep-dive into an app. Registration is now open for the Magnet User Summit 2018. Eric Huber introduces a new series of blog posts about moving

Welcome to this month’s round-up of recent posts to the Forensic Focus forums. How would you find credit card numbers using EnCase? Forum members help to locate network history and VPN profiles. How would you image and examine a Chromebook?

by Patrick Bell This walk-through will show you how to Bruteforce LUK volumes using hashcat, how you can mount a LUK partition, and how we can image it once it’s decrypted. Scenario: You’ve got a Macbook in. MacOS has been