Take the State of DFIR Survey

Caseloads, AI, tools and careers. 8 minutes, anonymous, early access to the report.

Take the survey →

Forensic Focus

How To Create A Full Forensic Image With Nuix Enterprise Collection Center

Nuix Enterprise Collection Center empowers ediscovery, digital forensics, and cybersecurity practitioners alike. Investigators are able to make a full forensic image, automated through the use of a simple collection wizard. After providing a case name, investigators are then able to

Highlights From The National Cybercrime Conference: Virtual Edition 2020

Virtualized online for the first time in its nearly decade-long history, the National Cybercrime Conference (NCCC)  — an annual event hosted by the Massachusetts Attorney General’s Office  — brought together a record 133 speakers to deliver a considerable volume of

Day-To-Day Challenges In Digital Forensics

All occupations face daily challenges. Many of these challenges come from dealing with the public, while some are more problem-solving challenges. In digital forensics, we face challenges on both ends of this spectrum because ultimately our jobs affect lives. Whether

Digital Forensics Standards: Recent News And Research

The global COVID-19 pandemic hasn’t slowed either the pace of technological change or its relevance to both criminal and civil investigations. Both fraud and child exploitation are examples of crimes that have increased since much of the world went on

How To Use Annotations In Amped Replay

Some of you may be aware of Amped Replay, but for those who are not, Replay can be considered the VLC (and much more!) for investigators. It was designed to make the life of investigators easier by providing them with

How To Perform An Android 10 Full File Extraction With MD-NEXT

New release: MD-NEXT v.1.89.5  Full filesystem extraction is available for Samsung Galaxy S10/Note10 Series (Exynos) with Android 10 (FBE enabled), and this will support the Samsung Secure Folder. Check out the video! If you have any questions, feel free to

Recent Research In Digital Forensics

Despite pandemic-related disruptions in both research and publishing as we head into the summer, there are still some posts and papers being published. In this round-up, we take a look at three recent articles in digital forensics. An Evaluation of

Virtualizing The Digital Forensics Lab

When the spread of COVID-19 spurred businesses and governments to close their doors and require employees to work from home, questions arose for those working in the criminal justice system. Operations couldn’t end, but to what extent would they be

Put Your Lab’s Existing Tools And Processes To Work — For Science

Digital forensic tools rely on the National Institute of Standards and Technology (NIST)’s National Software Reference Library (NSRL), the standard reference dataset, to filter out known software and images from unknown ones. Forensic examiners, judges, and attorneys rely on NIST’s

Mitigating Risk Through Standardization

A recap of Dr Gillian Tully’s DFRWS EU keynote. By Christa Miller, Forensic Focus No one denies that digital forensics is becoming more complex. The range of devices to examine keeps increasing, as does the complexity of acquiring and analyzing

Forensic Focus Forum Round-Up

Welcome to this month’s round-up of recent posts to the Forensic Focus forums. Forum members discuss search and seizures during covid. Can you help Jayt4049 with this WD HDD which is going to sleep while imaging? Forum members discuss mounting

DFRWS Virtual Europe 2020 — Recap

by Christa Miller, Forensic Focus This year’s Digital Forensics Research Workshop (DFRWS) EU, originally intended to take place in Oxford, England in March 2020, instead moved online in June. The conference included: Fourteen paper presentations focused on memory forensics, digital

Navigating Digital Investigations In 2020 Using BlackLight And MacQuisition

Arvinder: Hi, everyone. Thanks for joining today’s webinar, Navigating Digital Investigations In 2020 Using BlackLight And MacQuisition. My name is Arvinder Garcha. I’m the Director of Channels at BlackBag for Asia Pacific and Latin America. So before we kick things

MSAB XAMN

You’ve already extracted data from a mobile device, you’re up against the clock and you’re trying to analyze large amounts of mobile device and app data. Where do you start?  Join us for a 30-minute free webinar and learn smart