Take the State of DFIR Survey

Caseloads, AI, tools and careers. 8 minutes, anonymous, early access to the report.

Take the survey →

Forensic Focus

What Changes Do We Need To See In eDiscovery? Part I

by Harold Burt-Gerrans I’m approaching this multi-part article from a software development point of view, as I believe many of the following issues have been brought about by the evolution of eDiscovery software following the procedures used by handling boxes

What Changes Do We Need To See In eDiscovery? Part I

by Harold Burt-Gerrans I’m approaching this multi-part article from a software development point of view, as I believe many of the following issues have been brought about by the evolution of eDiscovery software following the procedures used by handling boxes

Crime Scene Investigation of GPS Data in Unmanned Aerial Vehicles (UAVs)

by Chirath De Alwis The invention of the Unmanned Aerial Vehicle (UAV), also known as the drone, has the potential to address some crucial issues in society. Commercial aerial surveillance, oil/gas/mineral exploration, and disaster relief are some of them [1].

Forensic Focus Forum Round-Up

Welcome to this month’s round-up of recent posts to the Forensic Focus forums. Forum members help a student with ISO 17025 data sets. Why do some files have Last Accessed metadata, but no other metadata? Can you explain why a

What’s Happening In Forensics – Sep 26, 2019

Andrea Fortuna talks about analysing Windows recycle bin artifacts. Cerbero release Cerbero Suite 3.4. Lenny Zeltzer discusses malware analysis on the SANS blog. Cellebrite’s Joanna Shemesh talks about how their tools solve encryption challenges on Apple and Android devices.

Kathy Helenek, Senior Forensic Examiner, Gillware

Kathy, you're a Senior Forensic Examiner and eDiscovery Specialist at Gillware. Tell us more about your role – what does a typical day look like for you? Each day I’m interacting with clients, whether it be scoping for a new

Interview With Guillermo Román Ferrero, Incident Response Expert

Guillermo, how did you become interested in digital forensics? I started studying digital forensics when I was still at university with a specific course on the matter. I found it very interesting to be able to investigate what an attacker

Guillermo Román Ferrero, Incident Response Expert

Guillermo Román Ferrero works as an Incident Response Expert for a Computer Security Incident Response Team. He is also a prolific author with his Follow the White Rabbit blog. Mr. Ferrero tried Belkasoft's digital forensics solutions recently and kindly agreed

What’s Happening In Forensics – Sep 23, 2019

Antonio Sanz provides a writeup of Defcon DFIR CTF: Memory Forensics. Salt4n6 talks about the forensic implications of Swipe to Type. Devon Ackerman reports how 281 people have been arrested for their participation in Business Email Compromise schemes. Cellebrite’s Shahar

What’s Happening In Forensics – Sep 19, 2019

MSAB share a white paper detailing four critical success factors in mobile forensics. Cellebrite’s Joanna Shemesh talks about how digital intelligence can help solve the problem of knife crime in England. SalvationDATA share a case study showing how to retrieve