News

Harald Baier presents his research at DFRWS EU 2019. Welcome to our joint paper. Mainly it was coordinated by Laurence Liebler, who gave a talk in the previous session about APX bin, and the scope is the same, so he’s

New version of Belkasoft Evidence Center v.9.8 is released with a number of fresh features, including significant improvements related to acquisition of iPhones and iPADs: – Acquisition of iOS devices with checkra1n jailbreak installed (No Cydia install is required!)– For

by Dr Tristan Jenkinson There have recently been a number of articles discussing the use of common passwords and encouraging better password practices. Most guidance includes the recommendation not to use the same password for different accounts. This makes sense

2019 was full of events, improvements, and upgrades for Belkasoft Evidence Center. To a great extent, our customers’ feedback was the source of these advancements. Owing to it, Belkasoft Evidence Center 2020 has become what it is now.2020 is approaching.

Wickr Messenger allows users to exchange end-to-end encrypted and content-expiring messages, and make end-to-end encrypted video conference calls. Wickr is regularly mentioned in various Internet sources as a secure messaging app. Let’s have a look at these secure features and

Hello. This is Sven from the technical team here at AccessData. This video will feature the Social Analyzer widget. So let’s get started. Go to Quin-C and open the grid, just to see how many items we have in our

Learn how to conduct a Windows live scan with ADF Solutions Digital Evidence Investigator. Two USB ports are required to complete a scan, one for the Collection Key and one for the Authentication Key, once the scan has started the

Welcome to this month’s round-up of recent posts to the Forensic Focus forums. Forum members advise on producing E01 images in reverse sector order. How would you convert an AD1 image to a dd? Can you help roncfluey to image

If you’re looking to dive deep into iOS examinations and the use of the GrayKey device and expand your knowledge of advanced forensics, then be the first to reserve your spot for the latest course from Magnet Forensics & Grayshift:

Did you know that Passware Kit can create a snapshot of a password recovery process at any time and resume it on a different computer? Running a password recovery attack, especially for multiple files or drives, might be a long

Beginning with version 19, Griffeye Analyze DI Pro and Core will start using the new Griffeye Intelligence Database, or GID, to replace the legacy intelligence manager. In this video, we’re going to discuss the changes that the GID brings to

by Oleg Skulkin Windows Prefetch files were introduced in Windows XP, and since that time they have helped digital forensics analysts and incident responders to find evidence of execution. These files are stored under %SystemRoot%\Prefetch, and are designed to speed

Decrypting BitLocker volumes or images is challenging due to the various encryption options offered by BitLocker that require different information for decryption. This article explains BitLocker protectors and talks about the best ways to get the data decrypted, even for

Oleg Afonin talks about the forensic analysis of Synology NAS devices. Alexis Brignoni shares a realm database storage primer for digital forensic examiners. Amped show how to resize images with Amped Replay. Passware announce a new partnership with BlackBag. OpenText

Hey everyone, Trey Amick from Magnet Forensics here. Today we’re talking about Mac USB investigations, and what happens when we’ve been alerted that a USB has been inserted into an end point. Different organisations handle USB policies differently. Some have

by Christa Miller, Forensic Focus Emoji are everywhere — including in your evidence. Used across private-messaging apps and email, social media, and even in passwords and account names, emoji are pictographic representations of objects, moods, and words. They’re a convenient