News

What’s New Extraction of iCloud keychain records Export and import of password recovery state Password recovery for LastPass databases Passwords extraction from 1Password databases Instant decryption of VeraCrypt volumes for Linux Password recovery for LUKS: support for an additional encryption

Michael Thompson and Timothy Vidas discuss their work at DFRWS US 2018.Joe: So, here we have Michael and Tim, who will be talking about their paper, ‘CGC Monitor: A Vetting System for the DARPA Cyber Grand Challenge’.Timothy: Hi. Thanks for

We’re excited to release the most powerful and comprehensive version of Magnet AXIOM: Magnet AXIOM 3.0. With AXIOM 3.0, we’re giving you the ability to recover digital evidence from more sources than ever before (including Mac computers and new cloud

by Arman Gungor As forensic examiners, we often have to analyze emails in isolation without the benefit of server metadata, neighbor messages, or data from other sources such as workstations. When authenticating an email in isolation, every detail counts—we review

Logicube®, Inc will be participating in an upcoming forensic computing and security conference, to be held April 9th in Madrid, Spain. The Congreso Informatica Forense y Seguridad 2019 is sponsored jointly by Ondata International, a Logicube authorized partner with more

Ben, tell us a bit about yourself and how you got into digital forensics. Hello! So in terms of background, I come from predominantly a law enforcement background, although I’ve also worked in counter-fraud in the private sector too. I’ve

Belkasoft is about to roll out one of the biggest updates of its flagship digital forensic tool in last few years. The company’s BEC (Belkasoft Evidence Center), which combines mobile, computer, RAM and cloud forensics in one product, now gets

Timothy Bollé discusses his research at DFRWS EU 2018.Timothy: Hello. I am Timothy Bollé. I am currently doing my PhD at the School of Criminal Justice in the University of Lausanne, with Professor Eoghan Casey. And I’m going to discuss

Amped Software have launched Amped Replay, an enhanced video player for digital forensic investigations. Magnet Forensics have released AUTOMATE, a new solution that allows digital forensics labs to complete investigations faster. BlackBag’s MacQuisition will now decrypt physical images from Macs

Sven Schmitt discusses his work at DFRWS EU 2018.Sven: Thank you very much, ladies and gentlemen. Thank you for having me. I will today talk about SQLite database forensics. My name is Sven Schmitt, as Bruce introduced correctly. I am

BlackBag Technologies is proud to announce the first and only solution to produce a decrypted physical image of Apple’s latest Mac systems utilizing the T2 chip. Current logical imaging solutions, including functionality available in the previous version of BlackBag’s own

by Jade James This article is a recap of some of the main highlights from the Forensics Europe Expo 2019, which took place in London, UK on the 5th and 6th of March. The Forensics Europe Expo has now run

Thomas Chopitea and Aaron Peterson discuss their research at DFRWS US 2018.Thomas: It’s our first time presenting here at DFRWS. It’s also my first time and Aaron’s first time attending. So, we’re pretty excited to be here. I’m Tom, this

Amped Software has launched Amped Replay, a new tool which allows frontline police officers and investigators to quickly and easily view, analyze and present video evidence. With Amped Replay, non-specialist units can convert and play videos from a variety of

Welcome to this month's round-up of posts in the Forensic Focus forums. Can you help honor_the_data with a data recovery question on a 101 partition? BSides Bristol has put out a call for presentations. How would you log in to