Forensic Focus

Welcome to Logicube’s tutorial on the Falcon-NEO forensic imager. The Falcon-NEO allows you to image directly to or from a network repository using SMB or CIFS protocol, or using iSCSI. Two 10GbE ports provide extremely fast network imaging performance. In

Congratulations on your new role! Tell us more about your law enforcement career. How did you get into digital forensics? Thanks so much! I am excited about the opportunity to come and work for Amped Software. I got into digital

This year’s Digital Forensics Challenge from the Korean Institute of Information Security & Cryptology (KIISC) has been announced. BlackBag’s latest version of MacQuisition can now decrypt physical images of the latest Mac systems utilizing the Apple T2 chip. Magnet AXIOM

by Christa Miller, Forensic Focus Mark Zuckerberg’s new “privacy manifesto” for Facebook marks not just a pivot in terms of how the social network shapes modern-day communication. It also marks what The Verge’s Casey Newton called “the end of the

Welcome to this month’s round-up of recent posts to the Forensic Focus forums. Can you recommend a script for filling up NVMe storage drives with random data? How do you find the date and time stamps of encrypted volumes mounted

A new digital forensics challenge hosted by the Korean Institute of Information Security & Cryptology (KIISC), the Digital Forensics Challenge 2019 aims to expand knowledge of computer forensics and contribute to the field. The challenge has two main categories: a

Welcome to Logicube’s tutorial on the Falcon-NEO Forensic Imager. The Falcon-NEO allows you to image directly to or from a network repository using SMB or CIFS protocol, and to image from a network location using iSCSI. Two 10GbE ports provide

Umit, you're Assistant Professor of Computer & Information Technology at Purdue University. Tell us about your role; what does a typical day in your life look like? I identify myself as Digital and Cyber Forensics researcher and educator. As a

by Oleg Skulkin Researchers became aware of the activities of the RTM group in December 2015. Since then, phishing emails distributing the trojan have been sent to potential victims with admirable persistence. From September to December 2018 the RTM group