±Forensic Focus Partners

Become an advertising partner

±Your Account


Forgotten password/username?

Site Members:

New Today: 0 Overall: 35131
New Yesterday: 2 Visitors: 202

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Webinars

Latest Forum Posts

 Topics   Replies   Author   Views   Last Post 
  iPad and iPhone in 'Activate' mode after factory reset 8 Adam10541 1995   Thu Feb 21, 2019 5:19 am 
  Decryption of LUKS encrypted RHEL Image (e01) 0 SwastiBhushan 48   Thu Feb 21, 2019 4:48 am 
  Contact for legal @ Google 1 armresl 300   Wed Feb 20, 2019 11:20 pm 
  DarkNet Friendships for Emergency 7 TinyBrain 609   Wed Feb 20, 2019 9:15 pm 
  Encase Imager SystemCacheControl Error 0x5. Access is denied 0 RtheK 91   Wed Feb 20, 2019 8:25 pm 

Review: Oxygen Forensic Detective From Oxygen Forensics

Wednesday, February 20, 2019 (10:05:58)
by Götz Güttich

Oxygen Forensic Detective is software that assists users to extract and analyze data from mobile devices, SIM-cards, storage cards, drones and IoT devices. It is intended to be used by law enforcement, special services, and corporations. We decided to test this tool in our lab to see what features are available and how it performs.

The program allows the bypass of screen locks on Android devices as well as the import of various backups and device images for further investigation. What is more, the examiner has access to more than 60 cloud services, including all of the most widely used applications. Also, the software allows examiners to extract call details, analyze social connections, and see frequently visited places on the map.

Read More
  • Posted by: scar
  • Topic: News
  • Score: 0 / 5
  • (335 reads)

Magnet Forensics And Grayshift Announce Exclusive Partnership

Wednesday, February 20, 2019 (07:39:23)
Magnet Forensics and Grayshift enter into an exclusive worldwide technology and distribution partnership.

Magnet Forensics and Grayshift, makers of GrayKey, announce an exclusive global technology and distribution partnership that will allow customers in law enforcement to perform the most comprehensive investigations on iOS devices possible today.

This exclusive partnership allows law enforcement agencies around the world to purchase GrayKey directly from Magnet Forensics. It comes out of a common goal to empower law enforcement agencies to do the important work that they do in protecting the citizens of their community.

Computational Forensics: Opportunities And Challenges

Monday, February 18, 2019 (12:24:45)
Katrin Franke discusses her research at DFRWS EU 2018.

Katrin: What I’d like to share with you is computational forensics – this is the field I’m working on officially, with the title for more than 10 years, unofficially the term was just not born I think more than 20 years. Using machine learning, pattern recognition, computational intelligence to advance forensic sciences; first, physical evidence, documents, handwriting, banknotes, passports, now the last ten years, digital evidence.

Alternative title, ‘Artificial Intelligence in Digital Forensics: What is behind the buzz?’ And I’m saying this a little bit provocative, because currently, there are so many talks about artificial intelligence out there that I am getting sometimes really on what is promised and what expectations are raised. In my presentation, I would like to take the chance to give you a little bit more deeper insight. So, I assumed that 50% working already with this, but I also assumed that the other 50% are a little bit scared on what is coming next.

Read More
  • Posted by: scar
  • Topic: News
  • Score: 0 / 5
  • (644 reads)

BlackBag Technologies And Image Analyzer Partner For Advanced Image Triage

Monday, February 18, 2019 (10:52:34)
BlackBag Technologies and Image Analyzer Announce a Partnership to Provide Advanced Image Categorization for Triaging Photos and Videos in BlackLight

BlackBag's premier computer forensics tool, BlackLight, will now filter images for threat categories through a partnership with the most trusted provider of offensive pictures and video recognition software on the market: Image Analyzer.

With hundreds of thousands of images on digital devices, examiners have the daunting task of sifting through this slew of pictures quickly and efficiently. Techniques based on file size, date created, and hash sets are a good start, but are insufficient for the sheer volume of data examiners must sort through.

Email Forensics: Investigation Techniques

Friday, February 15, 2019 (11:49:34)
by Chirath De Alwis

Due to the rapid spread of internet use all over the world, email has become a primary communication medium for many official activities. Not only companies, but also members of the public tend to use emails in their critical business activities such as banking, sharing official messages, and sharing confidential files. However, this communication medium has also become vulnerable to attacks. This article focuses on email architecture and existing investigation techniques used by forensic investigators.

Read More
  • Posted by: scar
  • Topic: News
  • Score: 0 / 5
  • (943 reads)

Forensic Focus Forum Round-Up

Thursday, February 14, 2019 (12:43:35)
Welcome to this round-up of recent posts to the Forensic Focus forums

Which tools would you recommend for extracting data from iCloud?

Can you help gostep to extract usernames from a FileVault 2 encrypted image?

How would you work out when and how BitLocker was enabled on a Windows 10 machine?

Discussions continue about how to define a scale of confidence for digital evidence.

Can you help USMC85 with a research project for their degree?
  • Posted by: scar
  • Topic: News
  • Score: 0 / 5
  • (549 reads)

Oxygen Forensic Detective Supports Parrot Drones And Uncovers BlaBlaCar Trips

Thursday, February 14, 2019 (11:05:00)
Oxygen Forensics has released an update to its flagship product, Oxygen Forensic® Detective, introducing advanced features to support Parrot drone flight logs extracted from either an installed mobile app and even a physical dump along with the exclusive ability to extract and parse BlaBlaCar and CoverMe data.


The nefarious use of recreational drones is already a part of many of today’s news stories. Keeping this in mind, we’ve introduced two new features in our robust drone forensics module – extending our support to now include Parrot drones and detailed parsing of DJI drone flight logs.

Parrot drone support. Our prior releases have supported data parsing from FreeFlight Pro, the official piloting mobile app for Parrot drones. However, the new version now delivers an ability to import and parse Parrot’s flight logs extracted from either an installed mobile app and also a drone physical dump. Now investigators can see geo coordinates containing timestamps and metadata that includes: altitude, velocity, ground speed, Wi-Fi signal, battery level, current satellite numbers, and more. The extracted flight history can be visualized with our built-in Maps.

DJI drone flight logs. The ability to import DJI drone logs has been a part of Oxygen Forensic Detective, but with this release, our JetEngine module will also support these valuable logs. Investigators now will be able to import DJI log flight logs and parse additional technical data, like drone acceleration, gyroscope and temperature details to name a few.

Adding APFS Support to The Sleuthkit Framework

Thursday, February 14, 2019 (10:05:22)
Joe Sylve discusses his work at DFRWS USA 2018.

Joe: So, as [Brad said], my name is Joe Sylve, I’m the Director of Research & Development at BlackBag Technologies. I’m going to talk about some work that we’ve done to integrate APFS support into the Sleuth Kit framework.

I was going to say that this might be a little bit of an awkward talk for me, but I’m not in a Santa suit, so I’m not going to say that anymore.

Joe: But the overview here is that we’ve got pretty full support for APFS and TSK, but the awkward part is that I can’t give it to you yet. Yeah, boo. BlackBag has been very nice and agreed to allow me to release the work. It’s just going to be released “soon”, because our commercial competitors haven’t really come close yet. But I would say [crosses fingers] … six months?

Read More
  • Posted by: scar
  • Topic: News
  • Score: 0 / 5
  • (796 reads)

BlackBag Technologies Launches Introduction To Forensics Course

Monday, February 11, 2019 (13:33:14)
Stay up to date with the most current, relevant, and credible training in the industry with BlackBag's comprehensive multi-device investigation training course: Digital Forensic Basics. Whether you are first learning the fundamentals forensic investigation techniques or interested in seeing BlackBag’s tools in action, this course is an excellent fit for any forensic professional who could benefit from a full scenario-based investigative tutorial, regardless of prior use of BlackBag tools.

The Reliability Of Clocks As Digital Evidence Under Low Voltage Conditions

Monday, February 11, 2019 (11:27:06)
Jens: Yes, hello! I am Jens-Petter Sandvik from the NTNU, a Norwegian university of science and technology. I am doing a PhD there. Also working in the police with digital forensics, I’ve been practicing digital forensics for last 12 years. But now I decided to do some academic work also.

The background for this talk is from my court case in Norway I was working with. We had … it’s like a telephone, mobile phone, and we had evidence of the clock being adjusted back for 24 hours in time, at a very interesting time for the investigation. They found the database entries actually, SQLite, entries from database that showed that the ID number was increasing but time suddenly was turned back 24 hours.

Read More
  • Posted by: scar
  • Topic: News
  • Score: 0 / 5
  • (844 reads)