Take the State of DFIR Survey

Caseloads, AI, tools and careers. 8 minutes, anonymous, early access to the report.

Take the survey →

UK businesses lack confidence in police e-crime handling

Businesses are not confident that the police have the necessary resources or technical knowledge to deal with e-crime effectively, a survey has found…”In our experience, few electronic crimes are taken seriously by the police,” said one respondent to the survey.

Police enlist AI to help tackle crime

Looking at how AI techniques can boost digital forensics, the UK government-funded Cyber Security Knowledge Transfer Network (KTN) will examine the potential use of AI in web counter-terrorism surveillance, fighting internet fraud, masking identities online and data mining. The KTN

Passware Exposes Private Data Indexed by Windows Search

Search Index Examiner lists all the documents, emails, and spreadsheets, as well as providing creation and modification dates, author, recipients, summary content, and other information for each item. The only data it needs from the target computer is a Windows

“Breath tests” for PCs heralds stop and scan

Technology that claims to pick up traces of illicit images on PCs has attracted the interest of Australian cops. The software, developed in an Australian University, might eventually be used to screen PCs during border inspections. Compared to breath test

Digital Technology Footprints Trip Up Suspects

The man denied any wrongdoing, but Lakeland police had something on him – his cell phone. Since the department founded its intelligence unit in 2001, cell phones, computers, MP3 players, and many other forms of digital technology have taken on

SANS Announces New Resources for Computer Forensics

Forensics experts tend to work alone or in small groups and have few ways of sharing the most important lessons they are learning. SANS is trying to fill that gap in part because SANS trained many of the most effective

AccessData offer for Guidance Software announced, rejected

AccessData Corporation has announced that on October 6th it sent a letter to Guidance Software expressing its interest in acquiring all of the company’s outstanding stock. On Friday October 31st, AccessData reports that it received a reply from Guidance Software

Computer crime soars in UK

Computer related crimes have risen by almost 10 percent in the UK last year alone, according to online identity firm, Garlick. The report claims that over 3.5 million online crimes were committed in the UK in 2007 – most of

libpff (alpha) released for open source PST and OST forensics

An alpha version of libpff for forensic investigators using open source forensic tools has been released. Libpff is a library with tools to read, extract and recover deleted e-mails. The file format on the personal folder format can be found

South Texas College instructor writes Computer Forensics for Dummies

Rey Anzaldúa’s new book, Computer Forensics for Dummies, hit the shelves in October 2008 and is helping consumers sleuth their own digital trails. “People underestimate the amount of digital information they leave behind on digital devices and throughout the Internet

Police may have beaten encryption key out of suspect

When criminals turn to disk encryption to hide the evidence of their crimes, law enforcement investigations can hit a brick wall. Where digital forensics software has failed to recover encryption passwords, one tried and true technique remains: violence. It is

Digital Forensics & Incident Response Go Live

The days of performing only traditional “dead” forensics on a host after a security incident are over. A shift to “live” forensics and incident response investigations is underway, with a round of new tools focused specifically on collecting volatile data

Evidentiary Songs Played by iPods

Some months ago we reported on the use of iPods as an educational tool, and provided information on schools and universities that have incorporated this technology for the benefit of their students. Our report today involves a more complex use

E-discovery’s here, but it doesn’t have to hurt

When headlines read, “Bear Sterns prosecutor builds case on e-mail,” how to keep or destroy electronically stored data may sound like a new business challenge. It doesn’t need to be, according to Derek Witte, who formerly practiced at Miller Johnson

UK Home Office mulls fighting hacking with corporate ASBOs

The Home Office is consulting on the possibility of applying serious crime prevention orders (AKA corporate ASBOs) to computer hacking laws. Serious crime prevention orders allow the courts to apply “injunctions” against criminal behaviour granted on the basis of the