Neutral examiners

by Craig Ball "I recently posted an open letter to judges on a blog that caters to an e-discovery audience. I asked judges to stop ordering parties to turn over their systems to the opposing side's computer forensic examiners and

ATC Releases Router Marshal(TM) for Automated Router Investigations

Motivated by a lack of forensic tools to acquire evidence from network devices in the field, ATC released the Router Marshal forensic tool on March 4, 2010. Router Marshal automatically acquires digital forensic evidence from network devices such as routers

SANS Releases Free Investigative Forensic Toolkit

A free tool is changing the way digital forensic professionals perform detailed examinations. The SANS Investigative Forensic Toolkit (SIFT) Workstation 2.0, created by Rob Lee, is the first of its kind – an online virtualized workstation environment to show that

IFFEE and DoJEE

April 1st sees the announcement of two new organisations for digital forensics professionals. The International Federation of Forensic Examiners in Europe (IFFEE) and the Department of Justice Expert Examiners (DoJEE) group in the US both aim to provide practitioners with

A High Tech Synergy to Managing the Cyber-sex Offender

Searching a computer can detect noncompliance, including new law violations, that occurred days or even years before the search. The most basic search or preview takes a quick look at the computer on site to determine if there are any

Copyright contravention and the modification of games consoles

by Dan Gaskell "The Copyright Design and Patents Act 1988 (CDPA) was amended by Statutory Instrument on 31 October 2003 through the introduction of the Copyright and Related Rights Regulations 2003. The driving force behind this was an EC Directive

How to Handle Hard Drives in Government Probe

Although there is plenty of ­guidance in case law and in the Federal Rules of Civil Procedure regarding court-supervised electronic discovery, companies responding to government requests find themselves on a journey without a road map. In the absence of court

Applying medical diagnostic principles to digital forensics

by Sean McLinden "Traditionally, computer forensics begins with the seizure of all possible evidence then test, test, test until either you find something or you decide that there is nothing to be found. To paraphrase an example attributed to Rob

What is this field called anyway?

by Chris Hargreaves "In this series of articles I hope to explore some of the issues in forensic computing from an academic perspective, which will hopefully complement the perspectives from other columnists in the corporate, legal and software development fields.

Computer forensics tool for banks aims to trace Trojans

Transaction security firm Trusteer has launched a remote forensics service designed to allow banks to diagnose if a client’s PC has been infected with malware following incidents of suspected fraud. The Flashlight service is designed to allow strains of malware

Dominik Weber: Thoughts on forensic software development

"Working late on a Thursday night in an otherwise pretty empty building, I pause for a moment while the debugger is stopped at a breakpoint. I am thinking of the big difference between doing it right and just making it

New Feature: Forensic Focus Columnists

Forensic Focus is delighted to announce that this month sees the start of regular columns written by some of the most knowledgeable and experienced professionals in the computer forensics industry and related fields. Aiming to cover a broad range of

Cyber crime losses in US almost ‘double’ during 2009

US losses to online crime almost doubled during 2009, reveals a report. Losses totalled $560m (£371m) in 2009, up from $265m (£176m) in 2008, showed the annual report by the Internet Crime Complaint Center (IC3)… More (BBC)

Police launch new high-tech mobile phone unit in Kent, UK

Sim card specialists will aid the technological tussle with crime following the formation of a new mobile phone unit at Kent Police. Officers throughout the county can now access deleted text messages, photographs and more in-house, saving the force an