Passware Kit 2017 v2: Supports iOS 10.2, iOS Keychain And iCloud Photo Library

The new version of Passware Kit Forensic recovers passwords for iOS 10.2 iTunes backups, WPA/WPA2 WiFi connections. Instantly extracts passwords stored in iOS Keychain. Acquires images (including deleted ones) from iCloud Photo Library. Improves performance while running on multi-GPU systems

Phill Moore’s Round-Up Of This Month In Forensics

James Habben at 4n6ir explores the SCCM database in two posts, and Mark Mckinnon wrote an Autopsy Plugin to extract the relevant data. Didier Stevens shows how to extract password history from the ntds.dit file. Roberto Rodriguez shows how to

Forensic Focus Forum Round-Up

Welcome to this month’s round-up of recent posts to the Forensic Focus forums. Do you have any recommendations for image enhancement? Add your suggestions on the forum. Forum members discuss deleted files and allocated space in EnCase. Which job category

Interview With Devon Ackerman, Senior Director, Kroll

Devon, tell us a bit about yourself. What's your background, and what's your current role? My name is Devon Ackerman, and I am currently a Senior Director in Kroll’s Cyber Security and Investigations practice. In this role, I have leadership

Devon Ackerman, Senior Director, Kroll

Devon, tell us a bit about yourself. What's your background, and what's your current role? My name is Devon Ackerman, and I am currently a Senior Director in Kroll’s Cyber Security and Investigations practice. In this role, I have leadership

Unscrambling Pixels: Forensic Science Is Not Forensic Fiction

by Martino Jerian, CEO and Founder, Amped Software In every branch of forensic science, we have to fight with the falsehoods introduced by the popular series à la CSI (hence the properly called CSI effect), but probably this belief is

Unscrambling Pixels: Forensic Science Is Not Forensic Fiction

by Martino Jerian, CEO and Founder, Amped Software  In every branch of forensic science, we have to fight with the falsehoods introduced by the popular series à la CSI (hence the properly called CSI effect), but probably this belief is

Phill Moore’s Round-Up Of This Month In Forensics

The Forensic 4Cast nominations are open! Vote for your favourite hardware, software, blog, book and more. Mari DeGrazia discusses what happens when Windows lies. Oxygen Forensic Detective has been updated with even more features. Michael on the Digital Forensics Podcast

Review: BlackLight 2016 R3 From BlackBag

Reviewed by Azeem – Cyber Security Professional I had no idea just how tightly BlackLight would grab onto my attention and then keep its hold. Yet, here I am. While I’ve heard positive feedback from people in the information security

BlackLight From BlackBag

Reviewed by Azeem – Cyber Security Professional Background I had no idea just how tightly BlackLight would grab onto my attention and then keep its hold. Yet, here I am. While I’ve heard positive feedback from people in the information

Forensic Focus Forum Round-Up

Welcome to this month’s round-up of recent posts to the Forensic Focus forums. Forum members discuss how to track employees’ phones. What kind of insurance do you have for forensic consulting? How would you go about acquiring an iPhone remotely?

Nuix Web Review & Analytics

by Scar de Courcier, Forensic Focus Background Nuix Web Review & Analytics (WRA) was created to enable analysts and non-technical investigators to collaborate on investigations. The tool allows a senior investigator or case supervisor to allocate and assign data to

Asking A VPS To Image Itself

by Chris Cohen There is a Linux Virtual Private Server (VPS) that you have been tasked to collect using a forensically sound method while ensuring confidentiality, integrity and availability. You have the password for a user who has ssh access

Asking A VPS To Image Itself

by Chris Cohen There is a Linux Virtual Private Server (VPS) that you have been tasked to collect using a forensically sound method while ensuring confidentiality, integrity and availability. You have the password for a user who has ssh access