Forensic Focus, Author at Forensic Focus

Frontline Managed Services’ Kyle Campbell on DFIR & E-Discovery Skills & Pathways

18th July 2022

Christa: Electronic discovery, or e-discovery, has always required some digital forensic skills as litigators prepare to present electronic data at trial. However, as technology evolves, likewise, the skills needed to identify, collect and analyze the data that’s most relevant to

PEM: Remote Forensic Acquisition of PLC Memory in Industrial Control Systems

14th July 202214th July 2022

Winner of the Best Paper Award at DFRWS-EU 2022, Nauman Zubair proposes a new memory acquisition framework to remotely acquire a programmable logic controller (PLC)’s volatile memory while the PLC is controlling a physical process. Session Chair: Welcome Nauman, happy

Defining Atomicity (and Integrity) for Snapshots of Storage in Forensic Computing

12th July 2022

In this video from DFRWS-EU 2022, Jenny Ottmann revisits the discussion on quality criteria for “forensically sound” acquisition of such storage and proposes a new way to capture the intent to acquire an instantaneous snapshot from a single target system;

Introducing 2 Forensic Focus Podcast Co-Hosts: Simon Biles and Alex Desmond

11th July 202211th July 2022

Christa: Welcome to the Forensic Focus podcast. I’m your host, Christa Miller. And this week we’re switching it up a little bit. We’re introducing some new co-hosts: Simon Biles and Alex Desmond. Simon’s an IT and digital forensics expert witness

Extraction and Analysis of Retrievable Memory Artifacts From Windows Telegram Desktop Application

8th July 2022

In this video from DFRWS-EU 2022, Pedro Fernandez-Alvarez describes research focused on the Telegram Desktop client, in particular the client process contents in a Windows system’s RAM. Session Chair: We are now in the topic of memory forensics, and we

Bridging the Gap: Standardizing Representation of Inferences in Diverse Digital Forensic Contexts

6th July 2022

Session Chair: So the next speaker is Timothy. It’s going to be online, so Timothy, are you ready? Timothy: Hi, everyone. So I’m Timothy Bollé, I’m a PhD student at the University of Lausanne. And today I will give a

Cellebrite’s Monica Harris on Achieving Balance in Corporate Investigations and E-Discovery

5th July 2022

Christa: Digital forensics in enterprises increasingly overlaps corporate investigations, e-discovery and incident response, with the result that enterprises themselves must balance data acquisition and retention with employee privacy and cyber security. This week on the Forensic Focus podcast we’re joined

What Can You Tell Us About Your Password? A Contextual Approach

30th June 2022

Aikaterini: I’m Aikaterini Kanta. I’m a PhD candidate with University College Dublin, and I’m really glad to be here today. I’m going to talk to you about my PhD research. So, about contextual based decryption. So, the average number of

Towards a Working Definition and Classification for Automation in Digital Forensics

28th June 2022

Gaëtan Michelet: So good morning, everyone. Today I will present the project we are working on with Frank Breitinger and Graham Horsman. This project is “Towards a working definition and classification for automation in the context of digital forensic”. And

Digital Forensics Research Update: May 2022

24th June 2022

Research published last month covered a wide range of issues in digital forensics, from limitations and challenges to new tools and techniques and lessons for those in higher education. Digital forensic techniques, now and in the future The National Institute

Quantifying Data Volatility for IoT Forensics With Examples From Contiki OS

23rd June 2022

Bruce Nikkel: …paper of the session is from Jens-Petter Sandvik and his colleagues at NTNU, and it’s on “Quantifying Data Volatility for IoT Forensics With Examples From Contiki OS.” Jens-Petter: Yeah. Thank you. So, I’m Jens-Petter Sandvik and my co-authors

A Systematic Approach to Understanding MACB Timestamps on Unixlike Systems

21st June 2022

Bruce Nikkel: Okay, thanks everyone. I hope you enjoyed the break. Welcome to the first session: session one, with the theme of file system forensics. We have two interesting papers in this session. The first one is a systematic approach

Enterprise Forensics: Traditions vs Reality in Modern DFIR

16th June 2022

Hans: So our keynote for today. Actually, I ran into Emre (online, of course) Tinaztepe from Binalyze in December. It was an interesting online meeting. I had to understand their technology. And I’m sure Emre’s going to tell us about

Global Incident Response: DFRWS-EU Keynote, 2022

14th June 2022

Chris Hargreaves: Without further ado, we can start the formal program and I’ll hand over to Serge Droz – I did my best there – for the first keynote of the week. Thank you. Serge: So, this technology is working.

Preparing for an Advanced Cyber Battlefield: The Digital Forensics for National Security Symposium

13th June 2022

With a focus on complex electronic crimes, attacks, and intrusions at the national, state, and local levels, the Digital Forensics for National Security Symposium facilitates discussions among defense, intelligence, government, industry, nonprofit, and academic stakeholders on how digital forensic tools

Santosh Khadsare on Capacity Building in Digital Forensics

6th June 2022

Christa Miller: Capacity building for digital forensics is defined as the development of new professionals and better equipped work environments, particularly as the digital forensics industry struggles to keep pace with the way technology and the trace evidence it creates