Forensic Focus

As the usage of smart phones and mobile devices continues to increase exponentially their important role in litigation cannot be overlooked. Mobile devices present unique challenges in finding the right data that is responsive to discovery requests. Having the skills

Oleg Afonin talks about why the iOS 12.4 jailbreak is a big deal for law enforcement. SANS share an introduction to Arsenal Image Mounter. Michael Karsyan talks about different opening methods that can be used to read log files.

A new webinar, Oxygen Forensic Jet Engine with Facial Recognition, is available to view here.Join the forum discussion here.View the webinar on YouTube here.Read a full transcript of the webinar here.Read More

Oleg Afonin talks about the forensic implications of Touch ID and Face ID in iOS 12. Maxim Suhanov shares a list of open research topics in Windows forensics. Oxygen Forensics demonstrate their Parrot Drone data extraction capabilities.

Edewede Oriwoh shares a concept and design for the Forensics Edge Management System. Sarah Edwards demonstrates iOS location mapping with APOLLO. SANS begin the countdown to DFIRCon 2019. Cellebrite’s Ben Armon shows how to consolidate multiple identifiers into a single

by Alexander Leonenko Today we would like to talk about RAID arrays with lost configuration and how to extract evidential data from them. Let’s start with understanding what a RAID is in the first place. RAID is a Redundant Array

Welcome to this month’s round-up of recent posts to the Forensic Focus forums. Forum members discuss the existence and utility of a forensic seed bank. Can you help Fra93 to check if a PDF file has been manipulated? How would

Magnet AXIOM 3.5 is now available. Andrea Fortuna discusses how to generate a Volatility profile for a Linux system. SANS talk about understanding the forensic science in digital forensics. MSAB release XRY 8.0.2. Amped describe how Amped FIVE is helping

John Walsh speaks about child protection investigations at Cellebrite’s TechDay. Amped share how to use Amped FIVE's color deconvolution filter to show relevant elements from color-mixed images.

Harlan Carvey discusses what ‘program execution‘ really means. Brett Shavers shares how the lessons he learned in the Marine Corps inform his digital forensics career. Anuj Soni shares how to perform code analysis with Ghidra. Cellebrite share a case study

Nicole, you started out in chemistry and biological sciences before moving from orthopedics to digital forensics. What prompted you to pivot into the cyber world? I actually get asked that question quite frequently, as my background has a little bit

Oxygen Forensics talk about the allegations that Huawei has been spying on US users. Harlan Carvey follows up with a second post on ‘chasing the DFIR cure.’