Inside the Homeland Security Investigations Computer Forensics Lab

Nearly every case Homeland Security Investigations (HSI) opens has some sort of digital evidence to be collected and analyzed. But the work can’t be done by just anyone. The data must be meticulously cared for by agents trained to preserve

Devices being remotely wiped in police custody

All the data on some of the tablets and phones seized as evidence is being wiped out, remotely, while they are in police custody, the BBC has learned. Cambridgeshire, Derbyshire, Nottingham and Durham police all told BBC News handsets had

Can You Get That License Plate?

We find ourselves analyzing new surveillance videos almost every day, and in most cases we can either solve the problem very quickly or understand (even quicker) that there is no information to recover in the video. In special cases though,

How to Recover Deleted Data with Oxygen Forensic SQLite Viewer

Oxygen Forensics has released a stand-alone Oxygen Forensic SQLite Viewer, enabling forensic experts to view and export information stored by system and third-party mobile applications. The tool enables access to deleted SQLite records, and lays out the content of SQLite

Can You Get That License Plate?

We find ourselves analyzing new surveillance videos almost every day, and in most cases we can either solve the problem very quickly or understand (even quicker) that there is no information to recover in the video. In special cases though,

Interview with Stuart Clarke, Director of Cybersecurity, Nuix

Stuart, please tell us more about your role as Director of Cybersecurity and Investigation Services at Nuix. My role covers three main areas: product development, support and training, and advisory to the United Nations’ International Telecommunications Unit (ITU). Having used

Stuart Clarke, Director of Cybersecurity and Investigation Services, Nuix

Stuart, please tell us more about your role as Director of Cybersecurity and Investigation Services at Nuix. My role covers three main areas: product development, support and training, and advisory to the United Nations’ International Telecommunications Unit (ITU). Having used

What cops need to know about Apple’s iOS 8 lockout

In mid-September, Apple rolled out iOS 8 for users of the more recent models of the iPhone, iPad, and Mac computers. Among many changes was a statement from Apple CEO Tim Cook that Apple would no longer assist law enforcement

How To Decrypt WeChat EnMicroMsg.db Database?

WeChat is a smartphone application where users can chat with their friends, share pictures, videos and audio chats. Users can also make free video calls and voice calls with their friends as long as they have Internet connection. Recently, we

A guide to RegRipper and the art of timeline building

I have often heard RegRipper mentioned on forums and websites and how it was supposed to make examining event logs, registry files and other similar files a breeze. RegRipper is developed and maintained by Harlan Carvey, who is the author

A guide to RegRipper and the art of timeline building

Background I have often heard RegRipper mentioned on forums and websites and how it was supposed to make examining event logs, registry files and other similar files a breeze (the event logs and the other files isn’t per say examined

Recovering Evidence from SSD Drives in 2014

Several years ago, Solid State drives (SSD) introduced a challenge to digital forensic specialists. Forensic acquisition of computers equipped with SSD storage became very different compared to acquisition of traditional hard drives. Instead of straightforward and predictable recovery of evidence,

FT Cyber Security Summit 2014 – Recap

Forensic Focus attended the FT Cyber Security Summit in London on the 3rd of September. This article is a recap of some of the main highlights of the event. The Cyber Security Summit brought together speakers and interested parties from

FT Cyber Security Summit 2014 – Recap

Forensic Focus attended the FT Cyber Security Summit in London on the 3rd of September. This article is a recap of some of the main highlights of the event. The Cyber Security Summit brought together speakers and interested parties from