Take the State of DFIR Survey

Caseloads, AI, tools and careers. 8 minutes, anonymous, early access to the report.

Take the survey →

Forensic Focus

Umit Karabiyik, Assistant Professor, Purdue University

Umit, you're Assistant Professor of Computer & Information Technology at Purdue University. Tell us about your role; what does a typical day in your life look like? I identify myself as Digital and Cyber Forensics researcher and educator. As a

Walkthrough: Carving With Belkasoft Evidence Center

by Yuri Gubanov, Danil Nikolaev & Igor Mikhailov © Belkasoft Research Carving is an irreplaceable technique widely used in data recovery and digital forensics. By using carving, we essentially perform a low-level scan of media for various artifacts, looking for

Walkthrough: Carving With Belkasoft Evidence Center

by Yuri Gubanov, Danil Nikolaev & Igor Mikhailov © Belkasoft Research Carving is an irreplaceable technique widely used in data recovery and digital forensics. By using carving, we essentially perform a low-level scan of media for various artifacts, looking for

Review Of Amped Replay From Amped Software

Amped Software is used by law enforcement, military, and government agencies worldwide. Founded in Italy, the company are committed to setting the standard for image and video forensics and helping to fight crime to keep communities safe. The main focus

Amped Replay From Amped Software

Reviewed by Jade James Amped Software is used by law enforcement, military, and government agencies worldwide. Founded in Italy, the company are committed to setting the standard for image and video forensics and helping to fight crime to keep communities

Digital Forensics News April 2019

The keynote speakers have been announced for DFRWS US 2019 – register before the 15th of May to take advantage of the hotel discount. Blackbag have released version 2019 R1 of Blacklight. AccessData's new API now supports automation of digital

Obtaining Critical Real-Time Evidence From The Cloud

Vladimir Katalov presents his research at DFRWS EU 2018.There is quite a lot of information on the smartphone, that’s probably the most available source now for all the data, including the private data, business data, a lot of [passwords], documents,

Obtaining Critical Real-Time Evidence From The Cloud

Vladimir Katalov presents his research at DFRWS EU 2018. Vladimir: Thank you for coming. Special thanks to all competitors from Cellebrite [chuckles] for being there. [You probably won’t learn anything here.] Anyway, I’m working for ElcomSoft. The company is based

Forensic Focus Forum Round-Up

Welcome to this month’s round-up of recent posts to the Forensic Focus forums. Forum members discuss how to image a server with RAID 5. Can you recommend some good website capture applications? How would you image a Dell 5290 2

Mobile Virtual Network Operators (MVNOs) In The US

by Patrick Siewart Increasingly, cellular records and their associated location information are being used in civil litigation, where previously they were considered to be a “law enforcement only” tool. But in the age when users carry at least one smartphone

Mobile Virtual Network Operators (MVNOs) In The US

by Patrick Siewart  Increasingly, cellular records and their associated location information are being used in civil litigation, where previously they were considered to be a “law enforcement only” tool.  But in the age when users carry at least one smartphone

Building Stack Traces From Memory Dump Of Windows x64

Yuto Otsuki discusses his research at DFRWS EU 2018.Yuto: Thank you, chairperson. I am Yuto Otsuki, a researcher at NTT Secure Platform Laboratories in Japan. Today, I’d like to talk about building stack traces from memory dump of Windows x64.

Building Stack Traces From Memory Dump Of Windows x64

Yuto Otsuki discusses his research at DFRWS EU 2018. Yuto: Thank you, chairperson. I am Yuto Otsuki, a researcher at NTT Secure Platform Laboratories in Japan. Today, I’d like to talk about building stack traces from memory dump of Windows