Forensic Focus

Josh Hickman shares his research at DFRWS US 2019. Josh: My name is Josh Hickman. I am the forensic scientist manager for the digital evidence section in the North Carolina state crime lab. And I am here this morning to

by Oleg Skulkin & Svetlana Ostrovskaya Recently Microsoft finally released the Chromium-based version of Edge Browser, so it seems we’ll miss ESE databases soon (not). Of course, it may have a similar set of forensic artifacts to Chromium or Chrome,

by Christa Miller, Forensic Focus Pattern of life analysis isn’t a new concept to anyone who’s ever been involved with intelligence, in particular surveillance. It’s all about the habits that people — suspects, persons of interest, crime victims, or those

For a project that promises great leaps in the development of mobile forensic related technologies, and a complete guide to the practices and standards that professionals in Europe should follow, the necessary training to support these initiatives is critical! That

Welcome to this month’s round-up of recent posts to the Forensic Focus forums. Can you tell whether files have been copied from one USB to another? What temperature should your forensic lab be? How do you process large amounts of

Nominations are open for the 2020 Forensic 4:Cast awards. FireEye discuss how to correlate user search LNK files. Group IB share a forensic view of Chromium-based Microsoft Edge. ElcomSoft release iOS Forensic Toolkit 5.30, including jailbreak-free extraction for multiple Apple

Have you ever served a search warrant and stared at the mountainous amount of digital media collected and wondered how much is actually related to your investigation? Or, have you had to undertake terabytes of storage media and wondered if

Steve, you've been Susteen's president for a little more than two years. Tell us more about what led you to the company and what appealed to you about leading it. The reason I joined the company is because we can

Belkasoft now supports checkm8 acquisition. Cellebrite share a case study showing how extraction of deleted videos can help in criminal investigations. Peter M. Stewart shares a round-up of Defcon 2019 DFIR CTF.

by Richard Press Criminals sometimes damage their mobile phones in an attempt to destroy evidence. They might smash, shoot, submerge or cook their phones, but forensics experts can often retrieve the evidence anyway. Now, researchers at the National Institute of

Heather Mahalik shares some tips for unlocking extra data in iPhone extractions. Ian Barwise talks about what it’s like to be a digital forensic examiner, and looks at some subsets of the career path. Joseph W. Shaw II discusses why