Digital Forensics News January 2019

OpenText have released EnCase Forensic 8.08, with new cloud and encryption capabilities. There’s only one week left to submit your proposals for DFRWS US 2019, which takes place in Portland, OR in July. The latest version of BlackLight from BlackBag

Forensic Focus Forum Round-Up

Welcome to this month’s round-up of recent posts to the Forensic Focus forums. What are your current best practices when you encounter a device that’s full disk encrypted? Would you be interested in attending a forensics get-together in the US

Powerful Digital Forensics With OpenTextâ„¢ EnCaseâ„¢ Forensic 8.08

Take digital investigations to the next level with new features in OpenTextâ„¢ EnCaseâ„¢ Forensic 8.08. Whether in the field or the lab, digital forensic examiners must overcome investigation roadblocks like OS updates, encryption, new file types, acquisition from the cloud,

How Trustworthy Is Digital Evidence?

Leonhard Hosch shares his research at DFRWS EU 2018. Leonhard: Thank you. I’ll be presenting the paper ‘Controlled Experiments in Digital Evidence Tampering, or How Trustworthy is Digital Evidence?’ I’m Leonhard Hosch, I’m with Felix Freiling, I’m currently doing my

BlackBag Technologies Releases BlackLight 2018 R4

BlackLight 2018 R4 is officially released! There are several important updates and improvements that will help your software run as efficiently as possible. What's New and Improved? – Apple’s latest picture and video formats (HEIC/HEVC) support– Tagging Improvements– iPhone XS,

Dissecting Malicious Network Traffic To Identify Botnet Communication

by Swasti Bhushan Deb Botnets are well-known in the domains of information security, digital forensics and incident response for hosting illegal data, launching DDOS attacks, stealing information, spamming, bitcoin mining, spreading ransomware, launching brute force attacks, managing remote access to

Forensic Email Collector Power User Webinar by Metaspike

Metaspike is kicking off the new year with a power user webinar for Forensic Email Collector users. Join Metaspike’s founder, Arman Gungor, for a 60-minute webinar where you’ll learn: * How to configure FEC for best acquisition performance.* How to

BlackBag’s BlackLight Used to Solve Mass Shooting

In the days following a mass shooting at a mall in Columbia, Maryland, the digital forensic analysis of the shooter’s Apple iPhone, computer, and iPhone backups played a pivotal role in the investigation. The digital forensic analysis was performed using

Atola Announces Taskforce 2018.12 With NVMe Support And Selective Imaging

Atola Technology presents the 2018.12 firmware version for Atola TaskForce, which includes support of NVMe drives, selective imaging of sectors containing data, improved UI, etc. Support of NVMe drives NVMe is the latest and greatest technology in the world of

Overcoming Apple Products for Digital Forensics

There are currently over one billion Apple products in consumer hands worldwide. Apple products often create unique challenges during data acquisition and digital investigations. Fortunately, OpenTextâ„¢ EnCaseâ„¢ Forensic and Tableau Forensic Hardware provide a broad range of Apple support to

Scene Of The Crime: You’ve Found A Drone. What Do You Do?

by Lee Reiber, COO, Oxygen Forensics, Inc. The proliferation of recreational drones and their impact on digital incident response has dramatically increased during the last several years. In January 2018, Nextgov stated the U.S. Federal Aviation Administration (FAA) reported over

MacQuisition From BlackBag

by Jade James MacQuisition is a simple but effective tool used for imaging and data collection of iMacs, MacBooks, and Mac Pros & Minis. This tool is solely for the use with Macs, but although it is a niche product

Passware Kit Forensic 2018 v2.1 From Passware

by Jade James Passware Kit Forensic is an easy to use tool which provides a ‘complete electronic discovery solution’, reporting on all password-protected items on a system and decrypting them. Passware comes with many features, including: password recovery for 280+