News

James Habben at 4n6ir explores the SCCM database in two posts, and Mark Mckinnon wrote an Autopsy Plugin to extract the relevant data. Didier Stevens shows how to extract password history from the ntds.dit file. Roberto Rodriguez shows how to

Belkasoft rolls out a major usability and performance update to Belkasoft Evidence Center 2017. The new release features brand new layout to simplify common tasks and speed up the routine, and comes with a 64-bit edition that significantly boosts performance

Welcome to this month’s round-up of recent posts to the Forensic Focus forums. Do you have any recommendations for image enhancement? Add your suggestions on the forum. Forum members discuss deleted files and allocated space in EnCase. Which job category

Devon, tell us a bit about yourself. What's your background, and what's your current role? My name is Devon Ackerman, and I am currently a Senior Director in Kroll’s Cyber Security and Investigations practice. In this role, I have leadership

by Martino Jerian, CEO and Founder, Amped Software In every branch of forensic science, we have to fight with the falsehoods introduced by the popular series à la CSI (hence the properly called CSI effect), but probably this belief is

Encrypted chat apps can be some of the hardest nuts to crack — especially when someone is trying to cover their tracks in advance — but they can also be vitally important to an investigation. Signal is a popular chat

In part one of our Portable Case series, our Director of Forensics, Jessica Hyde, took a look at the features and benefits of Portable Case. She highlighted the power of real-time collaboration with multiple stakeholders and having all the feedback

The Forensic 4Cast nominations are open! Vote for your favourite hardware, software, blog, book and more. Mari DeGrazia discusses what happens when Windows lies. Oxygen Forensic Detective has been updated with even more features. Michael on the Digital Forensics Podcast

Find your answers. Faster, easier and with greater precision. The enhanced XAMN Spotlight will help you attain the pivotal answers you need to make sense of your data – quick, precise, easy to use. This allows investigators, detectives and managers

New version also includes faster PhotoDNA processing, and support for KakaoTalk and Zalo. Magnet AXIOM 1.0.10 is now available for download!AXIOM 1.0.10 will give users: – Decryption of iOS 10.2 iTunes Backups — We’re always working on giving investigators the

Reviewed by Azeem – Cyber Security Professional I had no idea just how tightly BlackLight would grab onto my attention and then keep its hold. Yet, here I am. While I’ve heard positive feedback from people in the information security

Oxygen Forensics, a worldwide developer and provider of advanced forensic data examination tools for mobile devices and cloud services, announced today that its flagship product, Oxygen Forensic Detective 9.2, now features the ability to extract WebKit data from iOS and

Welcome to this month’s round-up of recent posts to the Forensic Focus forums. Forum members discuss how to track employees’ phones. What kind of insurance do you have for forensic consulting? How would you go about acquiring an iPhone remotely?

by Scar de Courcier, Forensic Focus Background Nuix Web Review & Analytics (WRA) was created to enable analysts and non-technical investigators to collaborate on investigations. The tool allows a senior investigator or case supervisor to allocate and assign data to

One of the most important parts of the forensic process is reporting and collaborating on findings. Magnet Forensics has built Portable Case, a feature of Magnet AXIOM and Magnet IEF to help foster that collaboration and make it more integrated,

by Chris Cohen There is a Linux Virtual Private Server (VPS) that you have been tasked to collect using a forensically sound method while ensuring confidentiality, integrity and availability. You have the password for a user who has ssh access