Forensic Focus Forum Round-Up

Welcome to this round-up of recent posts to the Forensic Focus forums. Is it legal to travel to China with full disk encryption on a laptop? Forum members discuss recovering deleted emails and OST/PST conversion. An OS HDD seems to

Cyber crime: First online murder will happen by end of year, warns US firm

Governments are ill-prepared to combat the looming threat of “online murder” as cyber criminals exploit internet technology to target victims, the European policing agency warned. In its most alarming assessment of the physical danger posed by online crime, Europol said

Inside the Homeland Security Investigations Computer Forensics Lab

Nearly every case Homeland Security Investigations (HSI) opens has some sort of digital evidence to be collected and analyzed. But the work can’t be done by just anyone. The data must be meticulously cared for by agents trained to preserve

Devices being remotely wiped in police custody

All the data on some of the tablets and phones seized as evidence is being wiped out, remotely, while they are in police custody, the BBC has learned. Cambridgeshire, Derbyshire, Nottingham and Durham police all told BBC News handsets had

Can You Get That License Plate?

We find ourselves analyzing new surveillance videos almost every day, and in most cases we can either solve the problem very quickly or understand (even quicker) that there is no information to recover in the video. In special cases though,

How to Recover Deleted Data with Oxygen Forensic SQLite Viewer

Oxygen Forensics has released a stand-alone Oxygen Forensic SQLite Viewer, enabling forensic experts to view and export information stored by system and third-party mobile applications. The tool enables access to deleted SQLite records, and lays out the content of SQLite

Using Dynamic App Finder to Recover More Mobile Artifacts

Data recovered from mobile chat apps is critical to many forensic investigations. However, with thousands of mobile chat apps in use today and a steady stream of new apps emerging, identifying, recovering and analyzing mobile chat data has become a

Interview with Stuart Clarke, Director of Cybersecurity, Nuix

Stuart, please tell us more about your role as Director of Cybersecurity and Investigation Services at Nuix. My role covers three main areas: product development, support and training, and advisory to the United Nations’ International Telecommunications Unit (ITU). Having used

What cops need to know about Apple’s iOS 8 lockout

In mid-September, Apple rolled out iOS 8 for users of the more recent models of the iPhone, iPad, and Mac computers. Among many changes was a statement from Apple CEO Tim Cook that Apple would no longer assist law enforcement

Learn How To Recover Vital Artifacts from BlackBerry Messenger

BlackBerry Messenger (BBM) was the original mobile messaging application, geared towards business users and productive consumers. Originally available only on BlackBerry devices, BBM has since gone cross-platform and is now accessible to Android and iOS users. While consumer interest in

A guide to RegRipper and the art of timeline building

I have often heard RegRipper mentioned on forums and websites and how it was supposed to make examining event logs, registry files and other similar files a breeze. RegRipper is developed and maintained by Harlan Carvey, who is the author

Paraben Adds iOS 8.0 Support in Release of DDS

Paraben is pleased to announce the release of Deployable Device Seizure (DDS) v4.6. All current Device Seizure license holders have access to this new version. What’s new in DDS v4.6 • Add support for iOS 7.1.x and 8.0 as well

Recovering Evidence from SSD Drives in 2014

Several years ago, Solid State drives (SSD) introduced a challenge to digital forensic specialists. Forensic acquisition of computers equipped with SSD storage became very different compared to acquisition of traditional hard drives. Instead of straightforward and predictable recovery of evidence,

Why Are WhatsApp Artifacts Important to Your Mobile Investigations?

Like Kik Messenger, WhatsApp is a cross-platform instant messenger service that has over 600 million users. It was purchased by Facebook in February 2014 and continues to grow in popularity. Much like other mobile chat applications, WhatsApp contacts, messages, and

FT Cyber Security Summit 2014 – Recap

Forensic Focus attended the FT Cyber Security Summit in London on the 3rd of September. This article is a recap of some of the main highlights of the event. The Cyber Security Summit brought together speakers and interested parties from