News

New Additions to the Ecosystem Empower Law Enforcement Users to Keep Pace with Changing Needs and Trends MSAB, the global leader in mobile forensics solutions, today announced the expansion of its Mobile Forensic Ecosystem solution with the addition of one

Belkasoft updates Belkasoft Evidence Center 2018 (BEC) with multiple improvements, offering live memory analysis and malware detection for Windows 10 RAM dumps and enhancing support for Android physical acquisition. In v.8.5 Belkasoft’s digital forensic suite supports wallet apps for two

Magnet AXIOM 1.2 is now available for customers to download, with new features including improved access to cloud-based data. Jon at Ciofeca Forensics discusses the forensic examination of Apple iCloud Notes. Paraben have launched the first IoT forensics training course

SC Media states, “This belongs in every lab doing mobile device forensics. Not only is it a solid tool. It is perfect for triage. We make this our Best Buy this month.” SC Media, a highly rated news source for

by Oleg Skulkin & Scar de Courcier Before you can begin analysing evidence from a source, it first of all needs to be imaged. This describes a forensic process in which an exact copy of a drive is made. This

Guidance Software (Now OpenText) has recently released EnCase® Forensic and EnCase Endpoint Investigator 8.05 supporting mobile device acquisitions in addition to the all-new EnCase Mobile Investigator, which offers powerful mobile data review and reporting capabilities for acquired mobile data. Working

We live in a truly digital age. The Internet of Things (IoT) is at the forefront of almost everything we touch as consumers. From the Amazon Echo to smart door locks, we are integrating IoT devices into daily life. However,

Latest release of MOBILedit Forensic Express brings many great additions including support of iOS 11 and Apple’s new photo format HEIF, Android user dictionary analysis, determine Android clock/time-zone manipulation, and improved deleted data and cell tower data retrieval. In 4.2

Welcome to this month’s round-up of recent posts to the Forensic Focus forums. Apple have announced a new file system – share your thoughts on the forum. Are these encrypted files, and if so, how would you access them? Forum

AccessData is offering a series of live training webinars based on some of our most popular sessions of the recent past. Our trainers have 30 years of experience in delivering superior training and certifications for digital forensics and legal e-discovery.

by Frank Block and Andreas Dewald The analysis of memory during a forensic investigation is often an important step to reconstruct events. While prior work in this field has mostly concentrated on information residing in the kernel space (process lists,

by Haider H. Khaleel Since the end of the 19th Century until the current time, law enforcement has been facing a rapid increase in computer-related crimes. In the present time, digital forensics has become an important aspect of not only

This year at DFRWS EU, Jan Peter van Zandwijk from the Netherlands Forensic Institute presented research into bit-errors. Take a look at the video and the full transcript here.

Cinthya, tell us a bit about yourself. What's your role, and what does a day in your life look like? I am a U.S. Army veteran. I recently fulfilled one of my biggest achievements, which was being awarded a Bachelor’s

Jan, tell us a bit about yourself. What's your role, and what does a typical day in your life look like? Well, I am a research assistant of the Cyber Analysis & Defense department of the Fraunhofer FKIE in Bonn,

by Nanni Bassetti Sometimes during a computer forensic investigation, we need to virtualize our image disk, because it could be useful for checking or finding something of interest. If we need to virtualize a disk image file, we can: 1.