Take the State of DFIR Survey

Caseloads, AI, tools and careers. 8 minutes, anonymous, early access to the report.

Take the survey →

Digital Assembly, NYU-Poly Help Speed Forensic Digital Photo Recovery for Gov/LE

Digital Assembly, a leading photo forensics software company with roots at Polytechnic Institute of New York University (NYU-Poly), will collaborate with the U.S. Department of Defense Cyber Crime Center (DC3) to improve DC3’s internally developed forensics carving tools. Digital Assembly

Australian ediscovery industry grows up

OK, so you’ve heard about the term ediscovery, and possibly know of Australia’s federal court ruling last year that meant all matters above a certain size must be dealt with 100% digitally. It’s all very well to dip into the

Unusual devices

by Sean McLinden "In 2007, New Jersey Governor Jon Corzine made the news twice for a single event. The first time was the report of a car accident on the Garden State Parkway in which he was seriously injured. The

Flash drives and acquisition

by Dominik Weber “Take a look at this”. It started simply with that. A co-worker was looking into some strange issue with an acquisition of a flash drive. It seemed that the acquisition hash changed every time the drive was

Publication: an ethical dilemma for DF research?

by Chris Hargreaves "Ethical issues in science are commonplace; examples such as cloning, climate change and genetic engineering are all subject to different ethical debates. Some subjects have clearly defined areas of potential ethical problems, for example in Psychology much

Cybercrime on the increase in the Netherlands

The number of instances of serious cyber crime in the Netherlands has reached 170 so far this year, compared with 150 cases in 2009 as a whole, internet security watchdog Govcert says in Tuesday’s Financieele Dagblad. Organised cyber crime is

Software could have covered CP accused doctor’s tracks

Software used on a doctor’s computer could have been used to cover his tracks if he was downloading CP, a court has heard. Douglas Harris, 29, deleted 16,000 files by using a window washer programme on his home computer in

Podcast: Review Of SANS FOR408 Course

"In this episode, I discuss a few news items and I review the SANS Forensic 408 course that I recently attended at SANS SecWest in San Diego. Also, I talk about the upcoming SANS Forensic & Incident Response Summit being

Met lab claims ‘biggest breakthrough since Watergate’

Police scientists have hailed a new technique that recently played a pivotal role in securing a murder conviction as the most significant development in audio forensics since Watergate. The capability, called “electrical network frequency analysis” (ENF), is now attracting interest

New AccessData Mobile Phone Forensics Field Tablet Device to Be Showcased

AccessData has announced that it will be giving computer forensics investigators a sneak peek at its new “Mobile Phone Examiner Plus” (“MPE +”) touch screen field tablet. AccessData partner, Mobile Forensics, Inc (MFI), will be showcasing the product at the

Interview with Sam Raincock, SRC

An interview with Sam Raincock of SRC is now online at http://www.forensicfocus.com/sam-raincock-interview-300510. Many thanks to Sam for her time and her thoughtful responses, the interview is sure to be of interest to both those currently working in the field and

Avoiding common job application errors – questions please!

I’m delighted to announce that computer forensics recruitment specialist David Sullivan has agreed to become a regular columnist here at Forensic Focus. David has asked for any questions related to his first piece, “Avoiding common job application errors”, to be

EnCase file copying and Windows Short File Names

By Lee Hui Jing, EnCe "A couple of months ago, one of my clients, an Investigating Officer from a Law Enforcement Agency, had requested me to extract some of the files from an image copy of a hard disk. The

To Avoid ‘Plain View,’ Investigators Need Blinders

The 1st, 4th, and 7th U.S. Circuit Courts of Appeal have applied the plain view doctrine to computer searches. The 9th U.S. Circuit Court of Appeals rejected the doctrine in United States v. Comprehensive Drug Testing. This article looks at