Forensic Focus

BYOB To A CTF To Improve Your DFIR Game

Even before COVID-19 drove homebound digital forensics examiners to seek out new modes of training and skill-building, Capture the Flag (CTF) challenges were a popular feature at numerous conferences. Now offered in virtual formats both during and outside of conferences,

Forensic Focus Forum Round-Up

Welcome to this month’s round-up of recent posts to the Forensic Focus forums. Forum members discuss smart TV acquisition. How do you determine the age of a person in images seized from a computer? Can you help this user with

How To Review Text Chats With Nuix Investigate

Today we’re going to take a look at how to review chat messages in Nuix Investigate, and the different viewing options. We currently have all the items retrieved through the grid, and we’re going to utilise the search filters on

SANS DFIR Summit 2020 Recap

The SANS DFIR Summit, the largest ever SANS Institute event thanks to a record 20,000 registered individuals, took place July 16-17 this year. In a fully virtual format owing to COVID-19 precautions, the Summit, said SANS Institute Fellow Rob Lee

Trust But Verify: Digital Artifact Edition

Julie: Hi, everyone. Thanks for joining today’s webinar Trust But Verify: Digital Artifact Edition. My name is Julie O’Shea, and I’m the global marketing manager here at BlackBag. Before we get started today, there are some things that I’d like

Josh Brunty On Digital Forensics Education

Christa: Hello, and welcome to the Forensic Focus podcast. Monthly, we interview experts from the digital forensics and incident response community on a host of topics ranging from technical aspects to career soft skills. I’m your host, Christa Miller.  Today,

How To Create A Full Forensic Image With Nuix Enterprise Collection Center

Nuix Enterprise Collection Center empowers ediscovery, digital forensics, and cybersecurity practitioners alike. Investigators are able to make a full forensic image, automated through the use of a simple collection wizard. After providing a case name, investigators are then able to

Highlights From The National Cybercrime Conference: Virtual Edition 2020

Virtualized online for the first time in its nearly decade-long history, the National Cybercrime Conference (NCCC)  — an annual event hosted by the Massachusetts Attorney General’s Office  — brought together a record 133 speakers to deliver a considerable volume of

Day-To-Day Challenges In Digital Forensics

All occupations face daily challenges. Many of these challenges come from dealing with the public, while some are more problem-solving challenges. In digital forensics, we face challenges on both ends of this spectrum because ultimately our jobs affect lives. Whether

Digital Forensics Standards: Recent News And Research

The global COVID-19 pandemic hasn’t slowed either the pace of technological change or its relevance to both criminal and civil investigations. Both fraud and child exploitation are examples of crimes that have increased since much of the world went on

How To Use Annotations In Amped Replay

Some of you may be aware of Amped Replay, but for those who are not, Replay can be considered the VLC (and much more!) for investigators. It was designed to make the life of investigators easier by providing them with

How To Perform An Android 10 Full File Extraction With MD-NEXT

New release: MD-NEXT v.1.89.5  Full filesystem extraction is available for Samsung Galaxy S10/Note10 Series (Exynos) with Android 10 (FBE enabled), and this will support the Samsung Secure Folder. Check out the video! If you have any questions, feel free to

Recent Research In Digital Forensics

Despite pandemic-related disruptions in both research and publishing as we head into the summer, there are still some posts and papers being published. In this round-up, we take a look at three recent articles in digital forensics. An Evaluation of

Virtualizing The Digital Forensics Lab

When the spread of COVID-19 spurred businesses and governments to close their doors and require employees to work from home, questions arose for those working in the criminal justice system. Operations couldn’t end, but to what extent would they be

Put Your Lab’s Existing Tools And Processes To Work — For Science

Digital forensic tools rely on the National Institute of Standards and Technology (NIST)’s National Software Reference Library (NSRL), the standard reference dataset, to filter out known software and images from unknown ones. Forensic examiners, judges, and attorneys rely on NIST’s