Software could have covered CP accused doctor’s tracks

Software used on a doctor’s computer could have been used to cover his tracks if he was downloading CP, a court has heard. Douglas Harris, 29, deleted 16,000 files by using a window washer programme on his home computer in

Podcast: Review Of SANS FOR408 Course

"In this episode, I discuss a few news items and I review the SANS Forensic 408 course that I recently attended at SANS SecWest in San Diego. Also, I talk about the upcoming SANS Forensic & Incident Response Summit being

Met lab claims ‘biggest breakthrough since Watergate’

Police scientists have hailed a new technique that recently played a pivotal role in securing a murder conviction as the most significant development in audio forensics since Watergate. The capability, called “electrical network frequency analysis” (ENF), is now attracting interest

New AccessData Mobile Phone Forensics Field Tablet Device to Be Showcased

AccessData has announced that it will be giving computer forensics investigators a sneak peek at its new “Mobile Phone Examiner Plus” (“MPE +”) touch screen field tablet. AccessData partner, Mobile Forensics, Inc (MFI), will be showcasing the product at the

Interview with Sam Raincock, SRC

An interview with Sam Raincock of SRC is now online at http://www.forensicfocus.com/sam-raincock-interview-300510. Many thanks to Sam for her time and her thoughtful responses, the interview is sure to be of interest to both those currently working in the field and

Avoiding common job application errors – questions please!

I’m delighted to announce that computer forensics recruitment specialist David Sullivan has agreed to become a regular columnist here at Forensic Focus. David has asked for any questions related to his first piece, “Avoiding common job application errors”, to be

EnCase file copying and Windows Short File Names

By Lee Hui Jing, EnCe "A couple of months ago, one of my clients, an Investigating Officer from a Law Enforcement Agency, had requested me to extract some of the files from an image copy of a hard disk. The

To Avoid ‘Plain View,’ Investigators Need Blinders

The 1st, 4th, and 7th U.S. Circuit Courts of Appeal have applied the plain view doctrine to computer searches. The 9th U.S. Circuit Court of Appeals rejected the doctrine in United States v. Comprehensive Drug Testing. This article looks at

Types of Digital Forensics Research

by Chris Hargreaves "Browsing through the forums on Forensic Focus, on numerous occasions I have come across requests for MSc project ideas. An MSc project is a research project, and that requires the identification of an area of research in

Digital forensic sampling

"In this paper we would like to address a few problems that we encounter in the digital forensic field, in general, which probably will get worse if our methods do not get smarter soon. A few problems that the digital

AccessData CEO Tim LeeHealey interview

Tim LeeHealey is CEO of pioneering US forensic firm AccessData, which creates solutions that address criminal and internal investigations, ediscovery and information assurance. On a visit to Sydney to attend a seminar for forensic investigators, LeeHealy took some time out

Big jump predicted in use of e-discovery

Organizations will increase their use of electronic discovery, according to new research from IT trade association CompTIA, which will open up opportunities for IT solution providers with the right skills and expertise. E-discovery conventionally refers to the discovery process in

Positive predictive value and digital forensics

by Sean McLinden "In my last column, I discussed the concept of prior probability, that is to say, the likelihood that that conclusion A can be derived from fact B with no additional data. In medical diagnosis, prior probability is