On the 28th of June 2021, Forensic Focus attended Exterro’s one-day training course for FTK Imager. The aim of the course is to give investigators an overview of FTK Imager and help them to understand what is going on under … Read more
Reviews
Book Review: Forensic Data Collections 2.0
As digital forensic practitioners, the proper collection of digital evidence in a forensic manner is second nature. In many cases, each of us has collected hundreds or even thousands of pieces of media and managed to keep intact the integrity … Read more
Oxygen Forensic Detective From Oxygen Forensics
I have been using Oxygen Forensic Detective for almost two years now. During my time using the software, I have had the occasion to provide inculpatory evidence on numerous cases, some of which rely solely on the digital evidence obtained … Read more
AIR From Binalyze
Modern forensic data acquisition in enterprise environments requires constant evaluation of approach, methods, tools and tactics. Multiple different ways of acquiring both logical and physical images from remote sources in corporate environments have been developed throughout the years, from deployment … Read more
XRY 9.4.3 From MSAB
Hold the phone… and the drone, and the GPS device, and the disk! Upon receiving MSAB’s software product XRY v9.4.3 and its compatible viewer, XAMN v6.1, we had full intentions of pulling out and dusting off a few of our … Read more
AD Enterprise 7.4.2 From AccessData
AD Enterprise allows investigators to collect, preserve and analyse data from various sources remotely from Windows and Mac computers, as well as to parse and review mobile data.
As a holistic tool which encompasses many features, Enterprise at its core … Read more
Amped FIVE Training From Amped Software
May 10th through the 14th of 2021, Amped Software offered a live online training course for their Amped FIVE Forensic Image and Video Enhancement product. This five-day beginner to intermediate level course was designed for investigators and forensic … Read more
Falcon-NEO Digital Forensic Imager From Logicube
The first review of the Logicube Falcon®– NEO was performed in July 2018 and having successfully used the same unit in both an IT and forensic investigative environment since, it is time to update that assessment to include … Read more
Virtual Forensic Computing (VFC) From MD5
In the pantheon of computer forensic analysis, practitioners are often faced with many problems that require innovative solutions. Every case or incident presents us with new challenges, new approaches, new work-arounds and new exploits. For many years, the practice of … Read more
Oxygen Forensic Detective From Oxygen Forensics
I have been using Oxygen Forensic Detective for academic and professional investigations since 2016, when the last available version was 8.4. Mobile forensics procedures have evolved a lot. Mobile software and hardware, applications and the information stored in smart devices … Read more
XRY V9.3 From MSAB
Digital forensic practitioners have been largely focused on mobile devices since the advent of the smart phone. Through the virtually countless generations of Apple, Android, Blackberry, Windows and legacy phones, the forensic analysis community has learned that the data contained … Read more
Passware Kit Forensic 2020 From Passware
Encryption, passwords, pass codes and other security measures are seemingly the ever-moving target in digital forensics. Whether your investigative focus is mobile devices and trying to bypass or obtain the pass code to collect valuable phone/tablet data; computer systems involved … Read more
Amped Authenticate From Amped Software
by Jade James
Digital image forensics is a niche branch of digital investigations, and the tools used are aimed to support ‘blind’ investigations. Amped Authenticate is a software package designed for forensic authentication and tamper detection on digital photos. Authenticate … Read more
BlackLight R3 From BlackBag
by Jade James
BlackLight is a simple but smart investigation tool which allows examiners to quickly analyse computer systems and mobile devices. Searching is made easy with advanced filtering to sift through large data sets. The tool is aimed at … Read more
AccessData Enterprise From AccessData
by Jade James
AccessData Enterprise enables investigators to forensically image and analyse devices. It also provides a means of workflow analysis and documentation, as well as a level of staff management. The inclusion of FTK means that examiners can conduct … Read more
XAMN From MSAB
by Jade James
MSAB specialise in providing products and services solely for mobile device forensics. The flagship product, XRY, has been used for decades by forensic examiners and investigators to extract data quickly and efficiently, and now XAMN can be … Read more