IEF Artifact Updates Have Become a More Frequent Thing

To stay on top of the rapidly evolving app landscape (and ensure IEF users continue to find as much digital evidence as possible in their investigations), the Magnet Forensics team has started to release more frequent artifact updates, adding to

AccessData MPE+ 5.5.6 has been released

MPE+ 5.5.6 has been released featuring a new simpler installation process as well as new analysis and reporting capabilities. Some of the new features include: Analysis You can now select files in both the media and the carved view to

Forensic Focus Forum Round-Up

Welcome to this round-up of recent posts to the Forensic Focus forums. Is there an MFT equivalent for EXT or HFS filesystems? Forum members discuss how to get started with Snapchat forensics. Which is the best programming language to learn

Forensic Analysis of SQLite Databases

SQLite is a widely popular database format that is used extensively pretty much everywhere. Both iOS and Android employ SQLite as a storage format of choice, with built-in and third-party applications relying on SQLite to keep their data. A wide

Job Vacancy: Snr. Computer Forensic Analyst, Oxfordshire, UK

This is an exciting opportunity for a Senior Computer Forensic Analyst / Digital Forensic Analyst to join our fantastic new Digital Forensics Team. The successful candidate will report to the Digital Forensics Manager, and will be responsible for managing and

“Test Drive” AccessData Products for FREE!

Available now: Evaluate any available AccessData solution for 20 days, full product capabilities, no license, no dongle and no credit card required. Click here to start your test drive today!

UK Home Office Report: eDiscovery in Digital Forensic Investigations

Nuix, a technology company that enables people to make fact-based decisions from unstructured data, welcomes the findings of the report ‘eDiscovery in Digital Forensic Investigations’ published by the United Kingdom Home Office. The report concludes that “Giving investigators rapid access

Acquiring Memory with Magnet RAM Capture

Recently, we released a new free tool that allows investigators to acquire the memory of a live PC. Customers using our IEF Triage module will already be familiar with this tool, as it’s used to acquire evidence from live systems.

Review: IEF Mobile Module

Reviewed by John J. Carney, Carney Forensics I am a digital forensics examiner who early in my career studied computer science and wrote code as a software developer and later in my career studied law and became a licensed attorney.

How Secure Is Your Password?

How many passwords does an average Joe or Jane have to remember? Obviously, it’s not just one or two. Security requirements vary among online services, accounts and applications, allowing (or disallowing) certain passwords. Seven years ago, Microsoft determined in a

Forensics and Bitcoin

This article does not attempt to provide a beginners guide to Bitcoin, nor an in-depth thesis on Bitcoin forensics. Rather, it will be an overview of the potential opportunities available to digital forensics and traditional investigators to obtain evidence in

Estonia President wants China and Russia to help fight cyber-crime

Speaking on the ‘Fighting Shadows’ panel at the Davos convention in Switzerland on Saturday,Toomas Hendrik Ilves joined senior figures from Kaspersky, Microsoft and the United Nations in calling for improved cyber-crime policing, laws and collaboration – whilst also calling into

Dealing With Records Found in SQLite Rollback Journals

Sanderson Forensics was recently contacted by a customer at a police force with a question relating to deleted SQLite records that were found in a rollback journal. The requirement was to create a report(s) showing both the live records in