Take the State of DFIR Survey

Caseloads, AI, tools and careers. 8 minutes, anonymous, early access to the report.

Take the survey →

Forensic Focus

A Standardized Corpus For SQLite Database Forensics

Sven Schmitt discusses his work at DFRWS EU 2018. Sven: Thank you very much, ladies and gentlemen. Thank you for having me. I will today talk about SQLite database forensics. My name is Sven Schmitt, as Bruce introduced correctly. I

Forensics Europe Expo London 2019 – Recap

by Jade James This article is a recap of some of the main highlights from the Forensics Europe Expo 2019, which took place in London, UK on the 5th and 6th of March. The Forensics Europe Expo has now run

Forensics Europe Expo London 2019 – Recap

by Jade James  This article is a recap of some of the main highlights from the Forensics Europe Expo 2019, which took place in London, UK on the 5th and 6th of March. The Forensics Europe Expo has now run

Turbinia: Automation Of Forensic Processing In The Cloud

Thomas Chopitea and Aaron Peterson discuss their research at DFRWS US 2018.Thomas: It’s our first time presenting here at DFRWS. It’s also my first time and Aaron’s first time attending. So, we’re pretty excited to be here. I’m Tom, this

Turbinia: Automation Of Forensic Processing In The Cloud

Thomas Chopitea and Aaron Peterson discuss their research at DFRWS US 2018. Thomas: It’s our first time presenting here at DFRWS. It’s also my first time and Aaron’s first time attending. So, we’re pretty excited to be here. I’m Tom,

Forensic Focus Forum Round-Up

Welcome to this month's round-up of posts in the Forensic Focus forums. Can you help honor_the_data with a data recovery question on a 101 partition? BSides Bristol has put out a call for presentations. How would you log in to

Burnout in DFIR (And Beyond)

by Christa Miller Quite a lot has been written over recent weeks about burnout. Not only DFIR-specific posts, first from Richard Bejtlich and then, in follow-up from Eric Huber and Brett Shavers; but also news articles including: • Why Are

Burnout in DFIR (And Beyond)

by Christa Miller, Forensic Focus Quite a lot has been written over recent weeks about burnout. Not only DFIR-specific posts, first from Richard Bejtlich and then, in follow-up from Eric Huber and Brett Shavers; but also news articles including: Why

Damaged Device Forensics

Steve: I have a few things to tell you. That when we first proposed this project to DHS, it was about two, two-and-a-half years ago, and then, at that point in time, there was really little industry penetration with drone

Damaged Device Forensics

Steve Watson discusses his research at DFRWS US 2018. Steve: [ETL] was a recent technology startup, we’re a small team of engineers that are focused primarily on [embedded] technology. So, people say “You’re the drone guy, you’re the chip-off …”

Styx: Countering Robust Memory Acquisition

Ralph: Welcome, everyone, and thank you for the introduction as well as having the opportunity to present our research. As mentioned, my name is Ralph Palutke, and I work as a PhD student for the Security Research Group of the

Styx: Countering Robust Memory Acquisition

Ralph Palutke discusses his work at DFRWS EU 2018. Ralph: Yeah. Welcome, everyone, and thank you for the introduction as well as having the opportunity to present our research. As mentioned, my name is Ralph Palutke, and I work as

Interview With Christa Miller, Content Manager, Forensic Focus

Christa, you’ve just joined Forensic Focus as a Content Manager – welcome on board! Tell us a bit about your background and how you came to work in digital forensics content creation. Thank you Scar! I’m coming to Forensic Focus

Christa Miller, Content Manager, Forensic Focus

Christa, you've just joined Forensic Focus as a Content Manager – welcome on board! Tell us a bit about your background and how you came to work in digital forensics content creation. Thank you Scar! I’m coming to Forensic Focus