News

A new webinar, Oxygen Forensic Jet Engine with Facial Recognition, is available to view here.Join the forum discussion here.View the webinar on YouTube here.Read a full transcript of the webinar here.Read More

Magnet AXIOM 3.5 is now available for customers—either within AXIOM or as a download over at the Magnet Forensics Customer Portal. In this release, we’ve added Apple warrant returns, new image categories in Magnet.AI, as well as some quality of

Oleg Afonin talks about the forensic implications of Touch ID and Face ID in iOS 12. Maxim Suhanov shares a list of open research topics in Windows forensics. Oxygen Forensics demonstrate their Parrot Drone data extraction capabilities.

Edewede Oriwoh shares a concept and design for the Forensics Edge Management System. Sarah Edwards demonstrates iOS location mapping with APOLLO. SANS begin the countdown to DFIRCon 2019. Cellebrite’s Ben Armon shows how to consolidate multiple identifiers into a single

BlackLight 2019 R2 is now available! This release is packed full of powerful features customers have requested and need to complete investigations quickly and efficiently. Enhancements and Improvements Include: • Archive File Processing• APOLLO Support via the new Plugin Manager•

by Alexander Leonenko Today we would like to talk about RAID arrays with lost configuration and how to extract evidential data from them. Let’s start with understanding what a RAID is in the first place. RAID is a Redundant Array

Welcome to this month’s round-up of recent posts to the Forensic Focus forums. Forum members discuss the existence and utility of a forensic seed bank. Can you help Fra93 to check if a PDF file has been manipulated? How would

Magnet AXIOM 3.5 is now available. Andrea Fortuna discusses how to generate a Volatility profile for a Linux system. SANS talk about understanding the forensic science in digital forensics. MSAB release XRY 8.0.2. Amped describe how Amped FIVE is helping

Did you know that Passware Kit can create a snapshot of a password recovery process at any time and resume it on a different computer? Running a password recovery attack, especially for multiple files or drives, might be a long

BlackBag Technologies announces a new partnership with industry-leading vehicle forensics company, Berla. In today’s investigations, it is now commonplace to have multiple digital devices associated to one case. As such, consolidating acquired devices is critical when reconstructing a sequence of

John Walsh speaks about child protection investigations at Cellebrite’s TechDay. Amped share how to use Amped FIVE's color deconvolution filter to show relevant elements from color-mixed images.

Harlan Carvey discusses what ‘program execution‘ really means. Brett Shavers shares how the lessons he learned in the Marine Corps inform his digital forensics career. Anuj Soni shares how to perform code analysis with Ghidra. Cellebrite share a case study

Oxygen Forensic Detective offers various methods of data extraction from Huawei devices. First, Huawei devices can be connected via USB cable for logical or physical acquisition depending on the model and Android OS version. However, with constantly growing device security

Nicole, you started out in chemistry and biological sciences before moving from orthopedics to digital forensics. What prompted you to pivot into the cyber world? I actually get asked that question quite frequently, as my background has a little bit

Oxygen Forensics talk about the allegations that Huawei has been spying on US users. Harlan Carvey follows up with a second post on ‘chasing the DFIR cure.’

Cyan Forensics are partnering with NCMEC, America’s National Center for Missing and Exploited Children, to help detect child abuse material. Greg Masi shares a list of folder type identifiers.