Computer forensics backlog risk

A build-up of seized technology waiting for forensic examination could pose a serious risk to ongoing investigations, the Association of Chief Police Officers (ACPO) lead on e-crime has warned. In an interview with The Register, Deputy Assistant Commissioner Janet Williams

Network Forensics and Digital Time Travel

Capturing, storing and analyzing network traffic using network forensics can let administrators turn back the clock to perform post-attack analysis for security exploits. Beyond security, there are other day-to-day use cases for network forensics… More (TechNewsWorld)

Age of cyber warfare is ‘dawning’

Chris Wysopal, chief technology officer at Veracode which advises many governments on security, said cyber war presented its own problems when it came to deciding motive and finding the perpetrators. “In physical warfare it’s pretty clear who has which weapon

Computer Forensics in the Geek Press – A Taxonomy

"So COFEE has finally been leaked onto the Internet. It was inevitable and it’s a wonder that it wasn’t released sooner, but nevertheless it marks a sad day for the Law Enforcement computer forensics community…So why the long face, as

Academic institutions – who are we missing?

As many of you know I’ve recently made a start on building the new education section at Forensic Focus (hopefully bringing it online later this month) with the aim of listing every computer forensics university and college course worldwide. I’d

EnCase Portable Wins Cygnus Law Enforcement Group Award in Forensics Category

EnCase Portable has been selected by an independent judges panel of law enforcement professionals for the Forensics award in Cygnus Law Enforcement Group`s 2009 Innovation Awards. The panel evaluated products submitted for innovativeness, productivity, quality, contribution, ease of use and

Tiffany Gates (ManTech) On the Importance of Cyber Forensics

What is cyber forensics and how does it factor in to cyber defense? "Cyber Forensics is the art and science of extracting data from digital media whereas cyber defense uses cyber forensics to identify threats and respond to incidents. However,

A Tool For Investigating Suspicious Activity

With the hit-or-miss performance of antivirus solutions and craftiness of malware authors, determining whether a computer system is infected is getting harder. As a result of the above conundrum, I’ve been looking for some way to get more details about

Texas DPS to hire more workers for computer forensics

Texas Department of Public Safety will hire more employees to help trim a backlog of computer-related investigations. A statement today from DPS says the goal is to decrease the time it takes to conduct forensic computer examinations, especially involving alleged

BlackBag Technologies Announces SoftBlock Write-Blocking Solution for Mac

BlackBag Technologies, Inc. today announced the release and general availability of SoftBlock, the Company’s much anticipated write-blocking software application that Mac forensic examiners can easily use to mount and manage devices containing suspect data in a forensically sound manner…With a

Profile of an IT forensics professional

A snapshot look at the IT forensics profession from the perspective of Rob Lee, an IT forensics expert at Mandiant… More (Computerworld)

Computer Forensics Proves “Balloon Boy” a Hoax

The Heene family’s e-mails secured by computer forensic engineers have proven the “Balloon Boy” stunt a hoax. The e-mails sent months before the event show Richard Heene and an associate discussing a media stunt similar to the balloon incident. Now,

Simple Steganography on NTFS when using the NSRL

A short paper from Adam Hurwitz of Business Intelligence Associates, Inc. titled “Simple Steganography on NTFS when using the NSRL” is now available here.