Take the State of DFIR Survey

Caseloads, AI, tools and careers. 8 minutes, anonymous, early access to the report.

Take the survey →

JTAG-Based Memory Acquisition Framework

Multicolored cables connect small electronic boxes
Hello everyone. My name is Muhammad Haris Rais. I am a PhD student at SAFE lab – Security And Forensics Engineering lab at Virginia Commonwealth University.  The lab is led by Dr. Irfan Ahmed and is mostly focused around industrial

Is More Efficient, Accessible Memory Forensics Possible?

Christa: Memory forensics is a mainstay of incident response. Its relevance and necessity only growing with time, as encryption technology has become more integrated, especially in consumer devices. Yet memory forensics is neither intuitive nor simple. Looking to change that

Seance: Forensic Divination

Hi everybody, my name is Ryan Maggio. I am a recent graduate from the Louisiana State University and today I’m going to be presenting a project called Seance that was worked on by myself, Andrew Case, Aisha Ali-Gombe and Golden

Register For Webinar: Grayshift Insights

As some of you may know, Grayshift recently celebrated its five-year anniversary. Since our inception, we have seen incredible growth with Graykey, which is now in use by over 1,000 law enforcement agencies and continues to be adopted globally. We are

Be That Trusted Advisor

A white businessman holds a tablet with a high customer satisfaction score
By Robert B. Fried, Senior Vice President, Sandline Global, Forensics & Investigations As forensic practitioners, we must do our best to stay ahead of ever-changing technology but sometimes we are thrown curve balls.  For example, taking a trip down memory

The Potential of Digital Traces in Providing Evidence at Activity Level

A slide featuring a news article and a crime scene diagram
Hello. My name is Hans Henseler from the University of Applied Sciences Leiden. I’m going to present about ‘The Potential of Digital Traces in Providing Evidence at Activity Level’. This presentation is based by work together with professional report. So