FTK Imager 100 One-Day Course From Exterro

A smiling Black woman wearing a yellow shirt sits at a desk in front of a laptop computer, her hand on the keyboard

On the 28th of June 2021, Forensic Focus attended Exterro’s one-day training course for FTK Imager. The aim of the course is to give investigators an overview of FTK Imager and help them to understand what is going on under … Read more

Book Review: Forensic Data Collections 2.0

As digital forensic practitioners, the proper collection of digital evidence in a forensic manner is second nature. In many cases, each of us has collected hundreds or even thousands of pieces of media and managed to keep intact the integrity … Read more

Oxygen Forensic Detective From Oxygen Forensics

I have been using Oxygen Forensic Detective for almost two years now.  During my time using the software, I have had the occasion to provide inculpatory evidence on numerous cases, some of which rely solely on the digital evidence obtained … Read more

AIR From Binalyze

Modern forensic data acquisition in enterprise environments requires constant evaluation of approach, methods, tools and tactics. Multiple different ways of acquiring both logical and physical images from remote sources in corporate environments have been developed throughout the years, from deployment … Read more

XRY 9.4.3 From MSAB

Hold the phone… and the drone, and the GPS device, and the disk! Upon receiving MSAB’s software product XRY v9.4.3 and its compatible viewer, XAMN v6.1, we had full intentions of pulling out and dusting off a few of our … Read more

AD Enterprise 7.4.2 From AccessData

AD Enterprise allows investigators to collect, preserve and analyse data from various sources remotely from Windows and Mac computers, as well as to parse and review mobile data.

As a holistic tool which encompasses many features, Enterprise at its core … Read more

Amped FIVE Training From Amped Software

May 10th through the 14th of 2021, Amped Software offered a live online training course for their Amped FIVE Forensic Image and Video Enhancement product. This five-day beginner to intermediate level course was designed for investigators and forensic … Read more

Falcon-NEO Digital Forensic Imager From Logicube

The first review of the Logicube Falcon®– NEO was performed in July 2018 and having successfully used the same unit in both an IT and forensic investigative environment since, it is time to update that assessment to include … Read more

Virtual Forensic Computing (VFC) From MD5

In the pantheon of computer forensic analysis, practitioners are often faced with many problems that require innovative solutions. Every case or incident presents us with new challenges, new approaches, new work-arounds and new exploits. For many years, the practice of … Read more

Oxygen Forensic Detective From Oxygen Forensics

I have been using Oxygen Forensic Detective for academic and professional investigations since 2016, when the last available version was 8.4. Mobile forensics procedures have evolved a lot. Mobile software and hardware, applications and the information stored in smart devices … Read more

XRY V9.3 From MSAB

Digital forensic practitioners have been largely focused on mobile devices since the advent of the smart phone. Through the virtually countless generations of Apple, Android, Blackberry, Windows and legacy phones, the forensic analysis community has learned that the data contained … Read more

Passware Kit Forensic 2020 From Passware

Encryption, passwords, pass codes and other security measures are seemingly the ever-moving target in digital forensics. Whether your investigative focus is mobile devices and trying to bypass or obtain the pass code to collect valuable phone/tablet data; computer systems involved … Read more

Amped Authenticate From Amped Software

by Jade James

Digital image forensics is a niche branch of digital investigations, and the tools used are aimed to support ‘blind’ investigations. Amped Authenticate is a software package designed for forensic authentication and tamper detection on digital photos. Authenticate … Read more

BlackLight R3 From BlackBag

by Jade James

BlackLight is a simple but smart investigation tool which allows examiners to quickly analyse computer systems and mobile devices. Searching is made easy with advanced filtering to sift through large data sets. The tool is aimed at … Read more

AccessData Enterprise From AccessData

by Jade James

AccessData Enterprise enables investigators to forensically image and analyse devices. It also provides a means of workflow analysis and documentation, as well as a level of staff management. The inclusion of FTK means that examiners can conduct … Read more

XAMN From MSAB

by Jade James

MSAB specialise in providing products and services solely for mobile device forensics. The flagship product, XRY, has been used for decades by forensic examiners and investigators to extract data quickly and efficiently, and now XAMN can be … Read more

Share to...