What’s Happening In Forensics – Mar 03, 2020

25th May 20202nd March 2020 by Forensic Focus

13Cubed share a memory forensics challenge.

Petr Stuchlík discusses SMB endpoint fingerprinting.

DFRWS share presentations from last year’s US conference.

Ryan Benson shares some digital forensics writing tips.

Latest Videos

Forensic Focus

In this episode, Si and Desi talk to Matt Suiche from Magnet Forensics about the rise of e-crime and info stealers.

They look at the latest shifts in how cybercriminals are operating, with a lot of ransomware gangs now moving towards hacking, stealing, extortion and leaking documents, rather than blindly encrypting files.

They also examine the importance of memory forensics in trying to detect active threats within a network, and how ChatGPT – a chatbot launched by OpenAI in November last year – could be leveraged to create functioning malware.

Want to hear more from Matt? You can check out Matt's presentation "Know When to Seek Help for Memory Loss" at both the Magnet Virtual Summit and the Magnet User Summit in
2023 (register at magnetvirtualsummit.com or magnetusersummit.com).

Show notes:

dumpIT - http://www.toolwar.com/2014/01/dumpit-memory-dump-tools.html

comae - https://www.comae.com/dumpit/

Matt’s wiki - https://en.wikipedia.org/wiki/Matt_Suiche

VMWare acquires CloudVolumes - https://blogs.vmware.com/euc/2014/08/cloudvolumes.html

Vitali Kremex - https://twitter.com/vk_intel?lang=en

ChatGPT - https://openai.com/blog/chatgpt/

Magnet Virtual Summit - https://magnetvirtualsummit.com/

Magnet User Summit - https://magnetusersummit.com/

YouTube Video UCQajlJPesqmyWJDN52AZI4Q_9NSMAdwrCzw

Magnet Forensics' Matt Suiche on the Rise of e-Crime and Info Stealers

Forensic Focus 12th January 2023 3:00 am

Pick the scenario. You have to prove or disprove something and your proof is in a phone. What to do? In this scenario, the phone is unlocked, and you must determine what methods of data extraction to employ. Will you use the Full File System extraction or go with the APK Downgrade method or maybe an Android Physical extraction exploit? If you have limited time then the Android OxyAgent approach might be best. This live webinar demonstrates leveraging multiple extraction technologies against an Android device using Oxygen Forensic® Device Extractor.

YouTube Video UCQajlJPesqmyWJDN52AZI4Q_byK1JiDWdZs

When an Android Phone is All You Have

Forensic Focus 9th January 2023 12:00 am

Just like your current holiday shopping for last minute presents a lot of the good stuff has gone off the shelves already. You reach to the back and find the toy nobody really wanted but it’s the thought that counts, you stare down at Si and Desi’s Holiday Special 2022 podcast.

Please join these two as they lament over the year that was, discuss all the things they didn’t do but promise they will do them next year, query whether putting a NAS in the storage of a roller door is a good idea, and finally arrive at what they’re looking forward to bringing you in the new year.

Show Notes:

Arduino PLC IDE - https://docs.arduino.cc/software/plc-ide
Mycroft Mark II (open source Alexa) - https://www.kickstarter.com/projects/aiforeveryone/mycroft-mark-ii-the-open-voice-assistant
Christa’s new blog - https://christammiller.com/
Si’s holiday reading - https://amzn.to/3iJyGrR
Desi’s holiday reading - https://inteltechniques.com/
Strange event for the end of the year - https://www.reuters.com/world/europe/25-suspected-members-german-far-right-group-arrested-raids-prosecutors-office-2022-12-07/
Si’s wishful thinking - https://www.youtube.com/watch?v=GXnRgXclLd0
Si’s list to do before the EOY - https://intrepidcamera.co.uk/products/intrepid-4x5-camera
Desi’s list to do before EOY - https://www.wired.com/story/how-to-reset-your-phone-before-you-sell-it/
“Cleaning your office” - https://www.manfrotto.com/uk-en/vintage-collapsible-1-5-x-2-1m-ink-sage-ll-lb5720/
Conference recorder - https://amzn.to/3UBmre5
Desi’s blog - https://www.hardlyadequate.com/

YouTube Video UCQajlJPesqmyWJDN52AZI4Q_BhrBg5_sAKo

Si and Desi Holiday Special 2022

Forensic Focus 16th December 2022 12:00 am

Load More... Subscribe

This error message is only visible to WordPress admins

Important: No API Key Entered.

Many features are not available without adding an API Key. Please go to the YouTube Feed settings page to add an API key after following these instructions.