Take the State of DFIR Survey

Caseloads, AI, tools and careers. 8 minutes, anonymous, early access to the report.

Take the survey →

Windows Registry Analysis 101

by Chirath De Alwis Computer forensics is the process of methodically examining computer media (hard disks, diskettes, tapes, etc.) for evidence. When considering computer forensics, registry forensics plays a huge role because of the amount of the data that is

Windows Registry Analysis 101

by Chirath De Alwis Computer forensics is the process of methodically examining computer media (hard disks, diskettes, tapes, etc.) for evidence [1].  When considering computer forensics, registry forensics plays a huge role because of the amount of the data that

Techno Security And Digital Forensics Conference CA 2019 – Recap

by Mattia Epifani The Techno Security and Forensics CA conference took place between 11th and 13th March at The Hilton Torrey Pines in La Jolla (San Diego). More than 200 attendees were present, coming from different fields like digital forensics,

Career Paths In Digital Forensics

by Christa Miller, Forensic Focus In the 30 or so years since the advent of personal computers made digital forensics a viable career path, the profession has matured to the extent of making multiple career paths possible. Now, professionals who

Digital Forensics Jobs And Career Paths

Digital forensics jobs and career paths
Digital forensics jobs and career path options have grown significantly over the past few decades. In fact, the profession has matured to the extent of making multiple career paths possible. Now, professionals who are interested in finding a job in

CGC Monitor: A Vetting System For The DARPA Cyber Grand Challenge

Michael Thompson and Timothy Vidas discuss their work at DFRWS US 2018.Joe: So, here we have Michael and Tim, who will be talking about their paper, ‘CGC Monitor: A Vetting System for the DARPA Cyber Grand Challenge’.Timothy: Hi. Thanks for

CGC Monitor: A Vetting System For The DARPA Cyber Grand Challenge

Michael Thompson and Timothy Vidas discuss their work at DFRWS US 2018. Joe: So, here we have Michael and Tim, who will be talking about their paper, ‘CGC Monitor: A Vetting System for the DARPA Cyber Grand Challenge’.Timothy: Hi. Thanks

Using The Content-Length Header Field In Email Forensics

by Arman Gungor As forensic examiners, we often have to analyze emails in isolation without the benefit of server metadata, neighbor messages, or data from other sources such as workstations. When authenticating an email in isolation, every detail counts—we review

Using The Content-Length Header Field In Email Forensics

by Arman Gungor As forensic examiners, we often have to analyze emails in isolation without the benefit of server metadata, neighbor messages, or data from other sources such as workstations. When authenticating an email in isolation, every detail counts—we review

Interview With Benjamin, Creator Of Metadata Interrogator

Ben, tell us a bit about yourself and how you got into digital forensics. Hello! So in terms of background, I come from predominantly a law enforcement background, although I’ve also worked in counter-fraud in the private sector too. I’ve

Benjamin, Creator Of Metadata Interrogator

Ben, tell us a bit about yourself and how you got into digital forensics. Hello! So in terms of background, I come from predominantly a law enforcement background, although I’ve also worked in counter-fraud in the private sector too. I’ve

Digital Forensics News March 2019

Amped Software have launched Amped Replay, an enhanced video player for digital forensic investigations. Magnet Forensics have released AUTOMATE, a new solution that allows digital forensics labs to complete investigations faster. BlackBag’s MacQuisition will now decrypt physical images from Macs

Standardized Corpus For SQLite Database Forensics

Sven Schmitt discusses his work at DFRWS EU 2018.Sven: Thank you very much, ladies and gentlemen. Thank you for having me. I will today talk about SQLite database forensics. My name is Sven Schmitt, as Bruce introduced correctly. I am