Rules of Evidence – Digital Forensics Tools

25th May 202010th June 2008 by Forensic Focus

Forensics tools are often confused with other classifications of tools, such as incident management, e-discovery and data recovery. But while they can be used for those purposes, the difference is that they abide by formal evidence processing protocols such as maintaining a chain of custody and avoiding the alteration or compromise of evidence, enabling any findings to be successfully used in a court of law. In short, while you can apply forensics tools to nonforensics work, it can be risky to use nonforensics tools. “If the evidence you’ve collected is not defensible in court, you’ve severely limited its later applicability,” says Jay Heiser, research VP and analyst at Gartner…

More (CSO Online)

Latest Videos

Forensic Focus

In this episode, Si and Desi talk to Matt Suiche from Magnet Forensics on the rise of e-crime and info stealers. They also discuss the new and exciting ChatGPT, a chatbot launched by OpenAI in November last year.

"Once upon a time, not long ago in the Land of Forensics, there was a show called the Forensic Focus Podcast. You know, where they talk about all forensics. Oh ho, the host of this show…” Oh no, they say I was the host. “It was smart and funny. Never once did they chat about boring things, oh no, not that. His guests were experts" - Bad ChatGPT

Show notes:

dumpIT - http://www.toolwar.com/2014/01/dumpit-memory-dump-tools.html

comae - https://www.comae.com/dumpit/

Matt’s wiki - https://en.wikipedia.org/wiki/Matt_Suiche

VMWare acquires CloudVolumes - https://blogs.vmware.com/euc/2014/08/cloudvolumes.html

Vitali Kremex - https://twitter.com/vk_intel?lang=en

ChatGPT - https://openai.com/blog/chatgpt/

Magnet Virtual Summit - https://magnetvirtualsummit.com/

Magnet User Summit - https://magnetusersummit.com/

YouTube Video UCQajlJPesqmyWJDN52AZI4Q_9NSMAdwrCzw

Magnet Forensics' Matt Suiche on the Rise of e-Crime and Info Stealers

Forensic Focus 12th January 2023 3:00 am

Pick the scenario. You have to prove or disprove something and your proof is in a phone. What to do? In this scenario, the phone is unlocked, and you must determine what methods of data extraction to employ. Will you use the Full File System extraction or go with the APK Downgrade method or maybe an Android Physical extraction exploit? If you have limited time then the Android OxyAgent approach might be best. This live webinar demonstrates leveraging multiple extraction technologies against an Android device using Oxygen Forensic® Device Extractor.

YouTube Video UCQajlJPesqmyWJDN52AZI4Q_byK1JiDWdZs

When an Android Phone is All You Have

Forensic Focus 9th January 2023 12:00 am

Just like your current holiday shopping for last minute presents a lot of the good stuff has gone off the shelves already. You reach to the back and find the toy nobody really wanted but it’s the thought that counts, you stare down at Si and Desi’s Holiday Special 2022 podcast.

Please join these two as they lament over the year that was, discuss all the things they didn’t do but promise they will do them next year, query whether putting a NAS in the storage of a roller door is a good idea, and finally arrive at what they’re looking forward to bringing you in the new year.

Show Notes:

Arduino PLC IDE - https://docs.arduino.cc/software/plc-ide
Mycroft Mark II (open source Alexa) - https://www.kickstarter.com/projects/aiforeveryone/mycroft-mark-ii-the-open-voice-assistant
Christa’s new blog - https://christammiller.com/
Si’s holiday reading - https://amzn.to/3iJyGrR
Desi’s holiday reading - https://inteltechniques.com/
Strange event for the end of the year - https://www.reuters.com/world/europe/25-suspected-members-german-far-right-group-arrested-raids-prosecutors-office-2022-12-07/
Si’s wishful thinking - https://www.youtube.com/watch?v=GXnRgXclLd0
Si’s list to do before the EOY - https://intrepidcamera.co.uk/products/intrepid-4x5-camera
Desi’s list to do before EOY - https://www.wired.com/story/how-to-reset-your-phone-before-you-sell-it/
“Cleaning your office” - https://www.manfrotto.com/uk-en/vintage-collapsible-1-5-x-2-1m-ink-sage-ll-lb5720/
Conference recorder - https://amzn.to/3UBmre5
Desi’s blog - https://www.hardlyadequate.com/

YouTube Video UCQajlJPesqmyWJDN52AZI4Q_BhrBg5_sAKo

Si and Desi Holiday Special 2022

Forensic Focus 16th December 2022 12:00 am

Load More... Subscribe

This error message is only visible to WordPress admins

Important: No API Key Entered.

Many features are not available without adding an API Key. Please go to the YouTube Feed settings page to add an API key after following these instructions.