Nuix Web Review & Analytics

by Scar de Courcier, Forensic Focus Background Nuix Web Review & Analytics (WRA) was created to enable analysts and non-technical investigators to collaborate on investigations. The tool allows a senior investigator or case supervisor to allocate and assign data to

Asking A VPS To Image Itself

by Chris Cohen There is a Linux Virtual Private Server (VPS) that you have been tasked to collect using a forensically sound method while ensuring confidentiality, integrity and availability. You have the password for a user who has ssh access

Asking A VPS To Image Itself

by Chris Cohen There is a Linux Virtual Private Server (VPS) that you have been tasked to collect using a forensically sound method while ensuring confidentiality, integrity and availability. You have the password for a user who has ssh access

Victor Limongelli, Chairman & Chief Executive Officer, AccessData

Congratulations on being named CEO of AccessData. You previously served as President and CEO of Guidance. Why AccessData? Why now? I’ve been in the industry since 2003, I’ve known – and competed against – AccessData for many years, and I

Google’s new AI system unscrambles pixelated faces

Google’s neural networks have achieved the dream of CSI viewers everywhere: the company has revealed a new AI system capable of “enhancing” an eight-pixel square image, increasing the resolution 16-fold and effectively restoring lost data. The neural network could be

Samsung sBrowser – Android Forensics: A Look Into The Cache Files

by Robert Craig and Michael Lambert Samsung devices are a large portion of the Android OS market. Samsung has its own Internet Browser, “sbrowser”, installed onto their devices. All web browsers leave artifacts from user activity. The “sbrowser” cache files

Samsung sBrowser – Android Forensics: A Look Into The Cache Files

by Robert Craig and Michael Lambert Abstract Samsung devices are a large portion of the Android OS market.  Samsung has its own Internet Browser, “sbrowser”, installed onto their devices.  All web browsers leave artifacts from user activity.  The “sbrowser” cache

Review Of Windows OS Training From AccessData

Reviewed by Scar de Courcier, Forensic Focus From the 6th-8th of December 2016, AccessData ran a Windows course in a training centre overlooking Trafalgar Square in London, UK. The aim of the course was to familiarise forensic investigators with the

Windows OS Training From AccessData

Reviewed by Scar de Courcier, Forensic Focus From the 6th-8th of December 2016, AccessData ran a Windows course in a training centre overlooking Trafalgar Square in London, UK. The aim of the course was to familiarise forensic investigators with the

This Month In Forensics

Curated by Phill Moore Russ McRee updated the Incident Response Hierarchy of Needs to a DFIR Hierarchy of Needs & Critical Security Controls. Oxygen Forensic Detective released version 9.1.1. Joshua James demonstrated how to compile The Sleuth Kit in Linux.

Forensic Focus Forum Round-Up

Welcome to this month’s round-up of recent posts to the Forensic Focus forums. What remnants does Word leave on the local disk? Have you done any research on how to reconstruct history from Google Chrome? Chime in on the forum.

Review Of Windows 10 Live Online Training From AccessData

Reviewed by Scar de Courcier, Forensic Focus From the 1st to the 3rd of November 2016, AccessData ran a live online training course to help forensic investigators understand the specific challenges presented by Windows 10, and how they can be