News

Prefetch files are great artifacts for forensic investigators trying to analyze applications that have been run on a system. Windows creates a prefetch file when an application is run from a particular location for the very first time. This is

One researcher digs into Windows, discovers a flaw (and a fix), and receives $100,000 from Microsoft. Another, threatened with prosecution for alleged hacking, becomes despondent and takes his own life. At the Black Hat 2014 conference, an all-star panel discussed

Oxygen Forensics announces the release of Oxygen Forensic® Passware® Analyst, a new mobile forensic tool integrating Oxygen’s award-winning acquisition and analytic tools with Passware’s password recovery and data extraction. The new tool integrates mobile acquisition, data extraction, password recovery and

Welcome to this round-up of recent posts to the Forensic Focus forums. A forum member unearths a very old hard drive; how can it be analysed? Is it possible to retrieve IP information by logging into a Hotmail account? Forum

LNK files are excellent artifacts for forensic investigators who are trying to find files that may no longer exist on the system they’re examining. The files might have been wiped or deleted, stored on a USB or network share, so

Emlyn, you’re currently Course Leader in Computer Forensics, Security & Ethical Hacking at Leeds Metropolitan University. Could you tell us more about the role and how you entered academia? As course leader it is my responsibility to maintain a healthy

Whether you’re a corporate examiner working an intellectual property theft, or a law enforcement investigator searching for illicit images, most forensic examiners have investigated the USB device history of a computer. There are five key pieces of information that need

Developers of software used to access Tor – an otherwise hard-to-reach part of the internet – have disclosed that an attack on the network may have unmasked users for five months. The Tor Project said that it believed the assault

Internet artifacts are only a subset of the potential evidence that can be found on mobile devices and computers. Internet Evidence Finder (IEF), from Magnet Forensics, now recovers more evidence in just one search with the new Business Applications &

Arnim, please tell us about your role as a lecturer in digital forensics, and how you first became interested in the field. I’ve been fascinated with ‘tinkering’ with computers from a young age: figuring out why things (don’t) work, reverse-engineering,

For more than 15 years, EnCase has empowered investigators by exposing data invisible to most tools and putting this data at the investigator’s fingertips with flexible, accessible analysis and reporting. EnCase 7.10 is built to continue this tradition. EnCase 7.10

The phenomenon of cyber bullying has received a significant amount of attention in the last decade and literature in this field has grown exponentially with advice and guidance on how to deal with cyber bullying. Yet the term cyber bullying

Paraben has announced the agenda for PFIC 2014. The popular digital forensics conference runs November 12-14, 2014 at Snowbird, Utah. PFIC has a successful mix of lectures, labs, and training sessions. In addition the event is known to have some

In this article we’ll describe the complete workflow for image and video forensics. In fact, just like computer forensics in not only dumb copying and looking at files, forensic video analysis is broad and complex and there are many steps

The recent rise in the number of people who suspect they may be being tracked on the internet, whether by government agencies, advertisers or nefarious groups, has led to increased interest in anonymising services such as TOR. TOR, or The

In recent years, cloud computing has made the leap from an emerging technology to government mainstay, allowing agencies an IT avenue to share services, save money and increase efficiency. However, cloud computing still presents some major technical challenges in government,