Forensic Focus

As digital evidence continues to become more common in litigation, so has the need for computer forensic experts. In some situations the success or failure of the entire case might be driven by the findings provided to the litigating attorney

We all know that Texas has the harshest laws, not matter what the crime is. This time they are targeting the IT world stating that a PI (private investigator) license must be obtained by all techs working in computer repair

Deep inside London’s legal quarter, a camera is fastened tightly over the latest mobile device, scrutinising every move the Serious Fraud Office is taking in its digital forensics unit. There is no room for error. If the unit’s forensic scientists

Guidance Software Inc. today announced the launch of its EnCase® On Demand training program which grants online access to the company’s courses in enterprise investigations (internal investigations, eDiscovery) and forensic investigations (law enforcement, fraud). The program’s inaugural offerings—EnCase Computer Forensics

WebCase(TM), the flagship product of Vere Software, enables law enforcement, corporations and government agencies to collect, preserve and present, from the Internet, evidentiary data including web captures, video recording, TCP/IP collection, image captures, keystroke logging and chat collection… More (VereSoftware)

A lot of IT professionals who get started with forensics see graphical forensic applications like Encase and Forensic Toolkit (FTK), and they get turned off when they see that the Sleuth Kit is a collection of command-line utilities. While there

A computer forensic expert continued testimony Wednesday in the Neil Entwistle murder trial. Police detective Lawrence James discussed with he found during a search of Entwistle’s laptop computer. Lawrence James told a Middlesex Superior Court jury yesterday that Entwistle did

[A link for those following this ongoing exchange – Jamie] We call on you to retract the following statement, made to the press on May 15, 2008: “We are absolutely certain that the computer exhibits that our experts examined came

[Here’s an article with more technical details on this earlier story – Jamie] Here’s a lesson for computer neophytes – when you get accused of having CP on your computer, subsequently get fired, lose your friends and family and face

For in-house attorneys, the costs of discovery rise when Electronically Stored Information (ESI) is uncontrolled. The objective of the litigation readiness process is to make sure that the IT professionals and the legal professionals, who certainly speak different languages, understand

A Department of Industrial Accidents investigator has been cleared of CP possession charges after a forensic investigation revealed that malware was to blame for depraved smut on his company laptop. Michael Fiola, 53, of Rhode Island, went through a massive

U.S. House of Representatives members who worry that China may have been responsible for attacks on their computers have provided little evidence to back up their claims, according to computer security experts…”It’s so very hard to conclude that something came

North Wales Police have launched a crime fighting business to step up their fight against computer and mobile phone crime. Police and BIC Innovation have joined forces to launch DATRIS – Data Recovery & Investigation Service – a private enterprise

Forensics tools are often confused with other classifications of tools, such as incident management, e-discovery and data recovery. But while they can be used for those purposes, the difference is that they abide by formal evidence processing protocols such as

The University of Cape Town (UCT) is training its first 15 postgraduates in computer forensics as part of an effort to establish a “centre of excellence” to combat, investigate and prosecute computer crime. UCT is from this year offering an

“They are now allowing EVIDENCE outside of the forensic lab. Not in the sense of copying data, but viewing the data, which due to caching is essentially the same as copying. This is not what I would consider acceptable in