News

If you are interested in a mobile forensic solution or are visiting Milipol Paris 2019, now is the perfect time to empower your investigations with HancomGMD. Please drop by our booth 4E 084 in Forensic Zone at Hall 5 and

Kik is a free instant messaging app, which works on iPhones, Androids and Kindles. As of May 2016, Kik Messenger had approximately 300 million registered users, and was used by approximately 40% of United States teenagers. Of its 15 million

With the release of Windows 10 version 1803, came an exciting new forensics artifact: The Activity Timeline. The Activity Timeline is designed to remind users what they were up to in the recent past and help them pick up those

HancomGMD is excited to announce our New Physical Extraction method for Samsung phone models up to Galaxy S9/Note 9 and major support for Android 9.0. The technology enables physical extraction regardless of screen / FRP lock without damaging the KNOX

With significant advances in extraction and decoding speeds, first-to-market support for the official iOS 13 release, new mobile app extraction capabilities and much more. Today’s release of new versions of XRY, XAMN and XEC gives mobile forensic examiners, investigators and

Welcome to this month’s round-up of recent posts to the Forensic Focus forums. Forum members help a student with ISO 17025 data sets. Why do some files have Last Accessed metadata, but no other metadata? Can you explain why a

Andrea Fortuna talks about analysing Windows recycle bin artifacts. Cerbero release Cerbero Suite 3.4. Lenny Zeltzer discusses malware analysis on the SANS blog. Cellebrite’s Joanna Shemesh talks about how their tools solve encryption challenges on Apple and Android devices.

Brett Shavers from DFIR.training reviewed Belkasoft Evidence Center (BEC). The review was dedicated to the latest version of BEC as an all-in-one digital forensic solution, which supports mobile and computer forensics as well as memory, cloud, and remote investigations. Among

Kathy, you're Director, Digital Forensics and Incident Response at Gillware. Tell us more about your role – what does a typical day look like for you? Each day I’m interacting with clients, whether it be scoping for a new case

BlackLight 2019 R2 is packed full of powerful features you need to complete your investigations more quickly. This release includes new methods to find and export data how and where you need it. From partnerships to connect BlackLight with other

Guillermo, how did you become interested in digital forensics? I started studying digital forensics when I was still at university with a specific course on the matter. I found it very interesting to be able to investigate what an attacker

Antonio Sanz provides a writeup of Defcon DFIR CTF: Memory Forensics. Salt4n6 talks about the forensic implications of Swipe to Type. Devon Ackerman reports how 281 people have been arrested for their participation in Business Email Compromise schemes. Cellebrite’s Shahar

Amped Replay is a universal player and converter for proprietary and standard video files, with basic enhancement, annotation and redaction functions, designed to be used by everyone from those on the immediate frontline of law enforcement to the more intermediate

Joe: What you’re looking at right now is the CyberSponse platform itself. As an incident responder, you’re going to spend most of your life either in the Alerts, or Violations, or Incidents page. In the Alerts page — what I’m

MSAB share a white paper detailing four critical success factors in mobile forensics. Cellebrite’s Joanna Shemesh talks about how digital intelligence can help solve the problem of knife crime in England. SalvationDATA share a case study showing how to retrieve

BlackBag assists law enforcement agencies with AI based image recognition technology to help with child abuse investigations in the latest release of BlackLight. The significant advances in neural networks and AI based computer recognition allows machines to accurately recognize and