Forensic Focus

Forensic Focus Forum Round-Up

Welcome to this month’s round-up of recent posts to the Forensic Focus forums. Can you help with this iPhone extraction in which a deleted SMS has a future timestamp? What happens to data on a backup tape when it is

Current Challenges In Digital Forensics

What is the most urgent question facing digital forensics today? That in itself is not a question with a straightforward answer. At conferences and in research papers, academics and forensic practitioners around the world converge to anticipate the future of

Current Challenges In Digital Forensics

What is the most urgent question facing digital forensics today? That in itself is not a question with a straightforward answer. At conferences and in research papers, academics and forensic practitioners around the world converge to anticipate the future of

Arsenal Reveals Sophisticated Evidence Tampering Involving Turkish Journalists

Arsenal Consulting President Mark Spencer’s article in Digital Forensics Magazine (Issue 27, published May 1) describes how his firm uncovered evidence tampering which led to the wrongful imprisonment of Turkish investigative reporter Baris Pehlivan and his colleagues at Odatv. Odatv

SSD and eMMC Forensics 2016 – Part 2

In the first part of this article, we reviewed different kinds of the most commonly used modern SSDs (M.2, PCI-E, NVMe devices) and talked about acquisition of these devices. In this part of the article, we will talk about external

SSD and eMMC Forensics 2016 – Part 2

What Has Changed in 2016 in the Way SSD Drives Self-Destruct Evidence. Demystifying eMMC, M.2, NVMe, and PCI-E. by Yuri Gubanov, Oleg Afonin © Belkasoft Research 2016 In the first part of this article, we reviewed different kinds of the

The Investigative Challenges Of Live Streamed Child Abuse

Among the challenges facing digital forensic investigators today, the instantaneous nature of online communication is arguably one of the most persistent. Trying to investigate whether a crime has occurred, and if so to bring its perpetrators to justice in a

The Investigative Challenges Of Live Streamed Child Abuse

Among the challenges facing digital forensic investigators today, the instantaneous nature of online communication is arguably one of the most persistent. Trying to investigate whether a crime has occurred, and if so to bring its perpetrators to justice in a

Man Jailed For Failing To Decrypt Hard Drives

A man has been held in prison for seven months after failing to decrypt two hard drives that investigators suspect contain indecent images of children. A court order says the man will remain jailed “until such time that he fully

Webinar: Data Visualisation: The Step Forward For Digital Forensics

A recording of the webinar “Data Visualisation: The Step Forward For Digital Forensics” is now online and available to view here. Join the forum discussion here.View the webinar on YouTube here.Read a full transcript of the webinar here.

Data Visualisation: The Step Forward For Digital Forensics

Presenters: James Billingsley, Principal Solutions Consultant, Cybersecurity & Investigations, Nuix; Robert J. O’Leary, Senior Solutions Engineer, Investigations SME, Nuix Join the forum discussion here.View the webinar on YouTube here.Read a full transcript of the webinar here.Robert O’Leary: My name, as

DFRWS EU – Recap

This article is a recap of some of the main highlights from DFRWS EU which took place at the University of Lausanne, Switzerland, from the 29th-31st of March 2016. The conference began with a discussion of virtual currencies by André

DFRWS EU – Recap

This article is a recap of some of the main highlights from DFRWS EU which took place at the University of Lausanne, Switzerland, from the 29th-31st of March 2016. Conference Highlights  The conference began with a discussion of virtual currencies

SSD and eMMC Forensics 2016

by Yuri Gubanov, Oleg Afonin This publication continues the series started with an article on SSD forensics we published in 2012. We investigated the issues of SSD self-corrosion, demystified trimming, garbage collection and data remapping. Two years later, we revisited

SSD and eMMC Forensics 2016

What Has Changed in 2016 in the Way SSD Drives Self-Destruct Evidence. Demystifying eMMC, M.2, NVMe, and PCI-E. by Yuri Gubanov, Oleg Afonin © Belkasoft Research 2016 This publication continues the series started with an article on SSD forensics we

Forensic Focus Forum Round-Up

Welcome to this month’s round-up of recent posts to the Forensic Focus forums. How would you trace the origin of a file on a USB drive? Add your thoughts in the forum. Forum members discuss forensic preservation of Dropbox data.