Corrobora – Cross-Artifact Consistency Analysis For Windows Digital Forensics

Hero Image

Dielle De Noon explores the development and validation of two key components of her open-source Windows digital forensics framework and how they lay the foundation for future cross-artifact correlation....

Go Beyond The Basics With XRY Kiosk From MSAB

Go Beyond The Basics With XRY Kiosk From MSAB

Go beyond the basics with XRY Kiosk - extract logical, full file system, physical and RAM data through controlled, compliant workflows built for fast frontline forensics....read more

How Semantics 21 Is Calling Time On Add-On Culture In Digital Forensics

How Semantics 21 Is Calling Time On Add-On Culture In Digital Forensics

Investigative capability shouldn’t be split across licences, modules and bolt-ons - S21 VisionX brings visual review, prioritisation and victim identification into one intelligence-led platform....read more

Magnet Forensics Expands Collaboration With NCMEC To Strengthen Victim Identification

Magnet Forensics Expands Collaboration With NCMEC To Strengthen Victim Identification

Coming soon to Magnet Griffeye: new capabilities will enable investigators to securely share CSAM-related files, hashes and investigative information directly with NCMEC, helping streamline workflows and support faster child victim identification....read more

How To Use Annotations In Amped Replay

Some of you may be aware of Amped Replay, but for those who are not, Replay can be considered the VLC (and much more!) for investigators. It was designed to make the life of investigators easier by providing them with

How To Perform An Android 10 Full File Extraction With MD-NEXT

New release: MD-NEXT v.1.89.5  Full filesystem extraction is available for Samsung Galaxy S10/Note10 Series (Exynos) with Android 10 (FBE enabled), and this will support the Samsung Secure Folder. Check out the video! If you have any questions, feel free to

Recent Research In Digital Forensics

Despite pandemic-related disruptions in both research and publishing as we head into the summer, there are still some posts and papers being published. In this round-up, we take a look at three recent articles in digital forensics. An Evaluation of

Virtualizing The Digital Forensics Lab

When the spread of COVID-19 spurred businesses and governments to close their doors and require employees to work from home, questions arose for those working in the criminal justice system. Operations couldn’t end, but to what extent would they be

6 Month Checkup at Oxygen Forensics

We’re halfway through the year, and it is time to recap what useful features we have introduced to the forensic community. Undoubtedly a challenging time; however, we released four significant updates with a tremendous amount of enhancements in all our

Get DVRConv 17521 with H.264 Quality Settings and New Formats

Did you know that Amped DVRConv is the easiest way to convert unplayable video files? Videos from proprietary CCTV/DVR systems, dashcams, body worn cameras, and any other video source can now be converted without effort. With Amped DVRConv, you just

Put Your Lab’s Existing Tools And Processes To Work — For Science

Digital forensic tools rely on the National Institute of Standards and Technology (NIST)’s National Software Reference Library (NSRL), the standard reference dataset, to filter out known software and images from unknown ones. Forensic examiners, judges, and attorneys rely on NIST’s

Get Amped FIVE Update 17338 With Three New Filters And Much More

Amped Software is happy to announce a very exciting update to Amped FIVE, the most complete image processing software specifically designed for forensic lab experts to manage the complete image and video analysis workflow, with advanced and fully customizable processes

MSAB New Release: XRY 9.1, XAMN 5.1 And XEC Export 6.0.1

Significantly increase the amount of location data, extract more refined data from more devices more securely and in less time, view content from warrant returns and more. Today’s release of new versions of XRY, XAMN and XEC Export represents a

Passware: Tips for Efficient TrueCrypt/VeraCrypt Decryption

VeraCrypt and the former TrueCrypt are two of the most challenging types of encryption to bypass with regard to their popularity as full disk encryption software. Unlike Bitlocker encryption, TrueCrypt/VeraCrypt may encrypt their containers and volumes with multiple encryption keys

Mitigating Risk Through Standardization

A recap of Dr Gillian Tully’s DFRWS EU keynote. By Christa Miller, Forensic Focus No one denies that digital forensics is becoming more complex. The range of devices to examine keeps increasing, as does the complexity of acquiring and analyzing

Forensic Focus Forum Round-Up

Welcome to this month’s round-up of recent posts to the Forensic Focus forums. Forum members discuss search and seizures during covid. Can you help Jayt4049 with this WD HDD which is going to sleep while imaging? Forum members discuss mounting