A Tool For Investigating Suspicious Activity

With the hit-or-miss performance of antivirus solutions and craftiness of malware authors, determining whether a computer system is infected is getting harder. As a result of the above conundrum, I’ve been looking for some way to get more details about

Texas DPS to hire more workers for computer forensics

Texas Department of Public Safety will hire more employees to help trim a backlog of computer-related investigations. A statement today from DPS says the goal is to decrease the time it takes to conduct forensic computer examinations, especially involving alleged

BlackBag Technologies Announces SoftBlock Write-Blocking Solution for Mac

BlackBag Technologies, Inc. today announced the release and general availability of SoftBlock, the Company’s much anticipated write-blocking software application that Mac forensic examiners can easily use to mount and manage devices containing suspect data in a forensically sound manner…With a

Profile of an IT forensics professional

A snapshot look at the IT forensics profession from the perspective of Rob Lee, an IT forensics expert at Mandiant… More (Computerworld)

Computer Forensics Proves “Balloon Boy” a Hoax

The Heene family’s e-mails secured by computer forensic engineers have proven the “Balloon Boy” stunt a hoax. The e-mails sent months before the event show Richard Heene and an associate discussing a media stunt similar to the balloon incident. Now,

Simple Steganography on NTFS when using the NSRL

A short paper from Adam Hurwitz of Business Intelligence Associates, Inc. titled “Simple Steganography on NTFS when using the NSRL” is now available here.

Met to spend £32m on digital forensics kit

The Metropolitan Police Service is to spend £32m on a four-year framework supply deal for equipment to help with forensic analysis of digital devices. The Official Journal of the European Union says the Met wants the equipment to cover computers,

Forensic tips in court

Computer forensics experts called to testify before a judge and jury must relay the facts of the case but equally important, must convey them in a way a jury can understand. On the witness stand, a computer forensic expert must

Shrinking the gap: carving NTFS-compressed files

A new paper from Joachim Metz of Hoffmann Investigations titled “Shrinking the gap: carving NTFS-compressed files” is now available here. Readers may be interested to note that carving NTFS-compressed data will be part of the advanced carving topic of the

Forensic experts recover 4,286 City Hall e-mails

Computer forensic experts have recovered 4,286 deleted e-mails that belonged to a top Menino aide, and will be releasing them to the media late tomorrow afternoon, the city announced last night… More (BostonHerald.com)

Interview with Jim Gordon, West Mercia Police

An interview with Jim Gordon, Computer Crime Analyst at West Mercia Police is now online at http://www.forensicfocus.com/jim-gordon-interview-150909