Brian Hill, Director of Training, Oxygen Forensics

Brian, you're Director of Training at Oxygen Forensics. Tell us about your role; what does a typical day in your life look like?

As Director of Training my goal is to not only develop content to help Oxygen Forensics customers implement our products in their investigations, but also build a knowledge base for them to be successful investigators in the long term as new technologies and techniques hit the market.This involves researching the latest trends and technologies, maintaining our live and online certification trainings, presenting webinars on investigative techniques, and scheduling classes around the world to ensure our users worldwide have access to development opportunities.

What was it that first sparked your interest in digital forensics, and which training courses did you attend when you were starting out?

I have always been interested in computers. From a young age I would build computer systems so that I could play the latest games. With each new version of any game it seemed that my system was not robust enough, so I would have to bring it up to the specs the game called for. I was fortunate to be able to take computer programming classes in high school, and that background assisted me when I joined the Air Force Reserves.

While working for the Anoka County Sheriff’s Office in MN, I was promoted to detective and selected as a digital forensic examiner, I was sent to numerous training classes including Access Data Boot Camp and NCFI in Alabama.


Get The Latest DFIR News

Join the Forensic Focus newsletter for the best DFIR articles in your inbox every month.


Unsubscribe any time. We respect your privacy - read our privacy policy.

When I first started out it was becoming apparent that phones were going to become a big part of digital forensics. I was intrigued by how mobile devices always presented me with a challenge to extract as much data as I could, so I began to learn everything I could about them.

In your opinion, what is the most challenging aspect of putting together a training course in this field? How do you address this?

In mobile forensics it is a challenge to keep everything current as app developers and device manufacturers are continually updating and releasing new versions of their software. Oxygen Forensics’ products are known for supporting an extensive portfolio of applications and I’m fortunate to have a product development team that is always looking forward to address the next generation of mobile technologies. Together with their help, the contributions of our training partners, and my own research and testing, we can build a curriculum that sets our customers up for success throughout their careers as investigators.

What can attendees expect to learn from Oxygen's courses?

Oxygen Forensics’ training courses are designed to offer insight into digital forensic investigations from start to finish, which means both beginners and long-time experts will walk away with the knowledge they need to excel in their roles.

Courses take a deep dive into the most common smart devices using Android, iOS, and Windows for students to gain familiarity with different operating systems, the types of data that can be retrieved from each, and their respective file system formats. Additionally, students will learn how to leverage advanced SQLite queries and plist files to discover the exact pieces of information relevant to investigations, whether an application is supported by Oxygen Forensics’ products or other forensic software.

Oxygen offers both online and in-person training; what are the advantages and challenges of each?

As an instructor, I appreciate the opportunity to interact with attendees and offer a hands-on learning experience through in-person training classes. However, not every customer is able to allocate budget or time away from the office to attend a live training, so our online learning management system offers a more flexible option for customers to take our courses at their own pace. We pair this with user forums and technical support lines to help address customer questions. At the completion of a course, attendees should be well informed and able to interact with our team regardless of which format works best for them.

What are some of the most common misconceptions you see from new students of digital forensics?

Some students who are new to mobile forensics expect to be able to plug a device in and click a button to retrieve everything they need. While support for certain applications makes collecting and using some information almost this easy, students quickly learn that there is far more information to be found by digging in and looking more closely.

If you could give one piece of advice to someone who wants to get started in digital forensics, what would it be?

Get all the training you can, when you can, and keep that training updated. This field is constantly changing, and there’s always something more you can learn.

Finally, when you're not working, what do you enjoy doing in your spare time?

I enjoy spending time in northern Minnesota with my wife and two daughters, ages 7 and 9. While up north we enjoy spending time out on the lake, swimming, and fishing. I have also found a new hobby of building and designing my own fishing rods.

Oxygen Forensics offer data examination tools for mobile devices and cloud services, including solutions for iOS, Android, Windows Phone, BlackBerry and many others.

Leave a Comment

Latest Videos

In this episode of the Forensic Focus podcast, Si and Desi explore how artificial intelligence is being leveraged to uncover crucial evidence in investigations involving child sexual abuse material (CSAM) and examine the importance of exercising caution when implementing these tools. 

They also discuss a recent murder case in which cyber experts played a vital role in securing a conviction, and explore the unique challenges associated with using digital evidence as an alibi.

Show Notes:

A Practitioner Survey Exploring the Value of Forensic Tools, AI, Filtering, & Safer Presentation for Investigating Child Sexual Abuse Material (CSAM) - https://dfrws.org/wp-content/uploads/2019/06/2019_USA_paper-a_practitioner_survey_exploring_the_value_of_forensic_tools_ai_filtering_safer_presentation_for_investigating_child_sexual_abuse_material_csam.pdf

Man charged with NI murder ‘faked live stream to provide alibi’ (The Guardian) - https://www.theguardian.com/uk-news/2023/feb/02/man-charged-with-ni-faked-live-stream-to-provide-alibi

A YouTuber accused of murder faked a 6-hour livestream to produce an alibi (Sportskeeda) - https://www.sportskeeda.com/esports/news-a-youtuber-accused-murder-faked-6-hour-livestream-produce-alibi

European Interdisciplinary Cybersecurity Conference (EICC) 2023 - https://www.forensicfocus.com/event/european-interdisciplinary-cybersecurity-conference-eicc-2023/#more-493234

YouTuber reportedly faked GTA livestream to have an alibi while he committed murder (Dexerto) - https://www.dexerto.com/entertainment/youtuber-reportedly-faked-gta-livestream-to-have-an-alibi-while-he-committed-murder-2052974/

Forensic Europe Expo - https://www.forensicfocus.com/event/forensic-europe-expo/#more-493225

In this episode of the Forensic Focus podcast, Si and Desi explore how artificial intelligence is being leveraged to uncover crucial evidence in investigations involving child sexual abuse material (CSAM) and examine the importance of exercising caution when implementing these tools.

They also discuss a recent murder case in which cyber experts played a vital role in securing a conviction, and explore the unique challenges associated with using digital evidence as an alibi.

Show Notes:

A Practitioner Survey Exploring the Value of Forensic Tools, AI, Filtering, & Safer Presentation for Investigating Child Sexual Abuse Material (CSAM) - https://dfrws.org/wp-content/uploads/2019/06/2019_USA_paper-a_practitioner_survey_exploring_the_value_of_forensic_tools_ai_filtering_safer_presentation_for_investigating_child_sexual_abuse_material_csam.pdf

Man charged with NI murder ‘faked live stream to provide alibi’ (The Guardian) - https://www.theguardian.com/uk-news/2023/feb/02/man-charged-with-ni-faked-live-stream-to-provide-alibi

A YouTuber accused of murder faked a 6-hour livestream to produce an alibi (Sportskeeda) - https://www.sportskeeda.com/esports/news-a-youtuber-accused-murder-faked-6-hour-livestream-produce-alibi

European Interdisciplinary Cybersecurity Conference (EICC) 2023 - https://www.forensicfocus.com/event/european-interdisciplinary-cybersecurity-conference-eicc-2023/#more-493234

YouTuber reportedly faked GTA livestream to have an alibi while he committed murder (Dexerto) - https://www.dexerto.com/entertainment/youtuber-reportedly-faked-gta-livestream-to-have-an-alibi-while-he-committed-murder-2052974/

Forensic Europe Expo - https://www.forensicfocus.com/event/forensic-europe-expo/#more-493225

YouTube Video UCQajlJPesqmyWJDN52AZI4Q_7QiFTiuY7Vw

AI In CSAM Investigations And The Role Of Digital Evidence In Criminal Cases

Forensic Focus 22nd March 2023 11:44 am

Throughout the past few years, the way employees communicate with each other has changed forever.<br /><br />69% of employees note that the number of business applications they use at work has increased during the pandemic.<br /><br />Desk phones, LAN lines and even VOIP have become technologies of the past workplace environment as employees turn to cloud applications on their computers and phones to collaborate with each other in today’s workplace environment.<br /><br />Whether it’s conversations in Teams, file uploads in Slack chats, or confidential documents stored in Office 365, the amount of data stored and where it is stored, is growing quicker than IT and systems administrators can keep up with.<br /><br />Corporate investigators and eDiscovery professionals need to seamlessly collect relevant data from cloud sources and accelerate the time to investigative and discovery review.<br /><br />With the latest in Cellebrite’s remote collection suite of capabilities, investigators and legal professionals can benefit from secure collection with targeted capabilities for the most used workplace applications.<br /><br />Join Monica Harris, Product Business Manager, as she showcases how investigators can:<br /><br />- Manage multiple cloud collections through a web interface<br />- Cull data prior to collection to save time and money by gaining these valuable insights of the data available<br />- Collect data from the fastest growing cloud collaboration applications like Office365, Google Workspace, Slack and Box<br />- Login to a single source for workplace app collection without logging into every app and pulling data from multiple sources for every employee<br />- Utilize a single unified collection workflow for computer, mobile and workplace cloud applications without the need to purchase multiple tools for different types of collections – a solution unique to Cellebrite’s enterprise solution capabilities

Throughout the past few years, the way employees communicate with each other has changed forever.

69% of employees note that the number of business applications they use at work has increased during the pandemic.

Desk phones, LAN lines and even VOIP have become technologies of the past workplace environment as employees turn to cloud applications on their computers and phones to collaborate with each other in today’s workplace environment.

Whether it’s conversations in Teams, file uploads in Slack chats, or confidential documents stored in Office 365, the amount of data stored and where it is stored, is growing quicker than IT and systems administrators can keep up with.

Corporate investigators and eDiscovery professionals need to seamlessly collect relevant data from cloud sources and accelerate the time to investigative and discovery review.

With the latest in Cellebrite’s remote collection suite of capabilities, investigators and legal professionals can benefit from secure collection with targeted capabilities for the most used workplace applications.

Join Monica Harris, Product Business Manager, as she showcases how investigators can:

- Manage multiple cloud collections through a web interface
- Cull data prior to collection to save time and money by gaining these valuable insights of the data available
- Collect data from the fastest growing cloud collaboration applications like Office365, Google Workspace, Slack and Box
- Login to a single source for workplace app collection without logging into every app and pulling data from multiple sources for every employee
- Utilize a single unified collection workflow for computer, mobile and workplace cloud applications without the need to purchase multiple tools for different types of collections – a solution unique to Cellebrite’s enterprise solution capabilities

YouTube Video UCQajlJPesqmyWJDN52AZI4Q_g6nTjfEMnsA

Tips And Tricks Data Collection For Cloud Workplace Applications

Forensic Focus 20th March 2023 11:00 am

This error message is only visible to WordPress admins

Important: No API Key Entered.

Many features are not available without adding an API Key. Please go to the YouTube Feed settings page to add an API key after following these instructions.

Latest Articles

Share to...