Winner of the Best Student Paper Award at DFRWS-EU 2022! Muhammad Haris Rais describes a step-wise approach to analyze the memory of specific PLCs, and subsequently find a generic framework applicable to all PLCs. By following a methodology that focused … Read more

The post Memory Forensic Analysis of a Programmable Logic Controller in Industrial Control Systems appeared first on Forensic Focus.

https://www.forensicfocus.com/webinars/memory-forensic-analysis-of-a-programmable-logic-controller-in-industrial-control-systems/

Grayshift continues to extend its strength in lawful access and extraction capabilities

As a leader in cell phone forensics, Grayshift, has been hard at work developing new features for law enforcement partners like you.

We strive to provide law enforcement … Read more

The post Get Ready for the Next Big Reveal From Grayshift appeared first on Forensic Focus.

https://www.forensicfocus.com/news/get-ready-for-the-next-big-reveal-from-grayshift/

Christa: Electronic discovery, or e-discovery, has always required some digital forensic skills as litigators prepare to present electronic data at trial. However, as technology evolves, likewise, the skills needed to identify, collect and analyze the data that’s most relevant … Read more

The post Frontline Managed Services’ Kyle Campbell on DFIR & E-Discovery Skills & Pathways appeared first on Forensic Focus.

https://www.forensicfocus.com/podcast/frontline-managed-services-kyle-campbell-on-dfir-e-discovery-skills-pathways/

MSAB, a global leader in digital forensic technology for mobile device examination and analysis, announced it has been named as a Major Player in the IDC MarketScape: Worldwide Digital Forensics in Public Safety 2022 Vendor Assessment. The report noted that

… Read more

The post MSAB – a Major Player in IDC report on Digital Forensics appeared first on Forensic Focus.

https://www.forensicfocus.com/news/msab-a-major-player-in-idc-report-on-digital-forensics/

Winner of the Best Paper Award at DFRWS-EU 2022, Nauman Zubair proposes a new memory acquisition framework to remotely acquire a programmable logic controller (PLC)’s volatile memory while the PLC is controlling a physical process.

Session Chair: Welcome … Read more

The post PEM: Remote Forensic Acquisition of PLC Memory in Industrial Control Systems appeared first on Forensic Focus.

https://www.forensicfocus.com/webinars/pem-remote-forensic-acquisition-of-plc-memory-in-industrial-control-systems/

By David Spreadborough – Forensic Video Analyst at Amped Software

There are several common components within a CCTV Video file. This article from Amped Software is going to dive into the data that links the image to the time when … Read more

The post When Did It Happen? Dealing With Timestamps in Amped FIVE appeared first on Forensic Focus.

https://www.forensicfocus.com/articles/when-did-it-happen-dealing-with-timestamps-in-amped-five/

What’s new in Passware Kit Mobile 2022 v3: GPU-accelerated password recovery for MediaTek-based LG devices Data extraction from applications on LG: Signal, Wickr, 1Password iOS 15.5 support Support for Apple devices with A9X chip Support for HFS+ (iOS prior to

… Read more

The post Passware Kit Mobile 2022 v3 – GPU-Accelerated Password Recovery for MediaTek-Based LG Smartphones appeared first on Forensic Focus.

https://www.forensicfocus.com/news/passware-kit-mobile-2022-v3-gpu-accelerated-password-recovery-for-mediatek-based-lg-smartphones/

In this video from DFRWS-EU 2022, Jenny Ottmann revisits the discussion on quality criteria for “forensically sound” acquisition of such storage and proposes a new way to capture the intent to acquire an instantaneous snapshot from a single target system; … Read more

The post Defining Atomicity (and Integrity) for Snapshots of Storage in Forensic Computing appeared first on Forensic Focus.

https://www.forensicfocus.com/webinars/defining-atomicity-and-integrity-for-snapshots-of-storage-in-forensic-computing/

Christa: Welcome to the Forensic Focus podcast. I’m your host, Christa Miller. And this week we’re switching it up a little bit. We’re introducing some new co-hosts: Simon Biles and Alex Desmond. Simon’s an IT and digital forensics expert … Read more

The post Introducing 2 Forensic Focus Podcast Co-Hosts: Simon Biles and Alex Desmond appeared first on Forensic Focus.

https://www.forensicfocus.com/podcast/introducing-2-forensic-focus-podcast-co-hosts-simon-biles-and-alex-desmond/

In this video from DFRWS-EU 2022, Pedro Fernandez-Alvarez describes research focused on the Telegram Desktop client, in particular the client process contents in a Windows system’s RAM.

Session Chair: We are now in the topic of memory forensics, and … Read more

The post Extraction and Analysis of Retrievable Memory Artifacts From Windows Telegram Desktop Application appeared first on Forensic Focus.

https://www.forensicfocus.com/webinars/extraction-and-analysis-of-retrievable-memory-artifacts-from-windows-telegram-desktop-application/

We are happy to release a demo video of MD-DRONE!

Drone and UAVs are commonly used for public service purposes or terror and crimes are often involved with this remotely controlled mobility tool.

The need for the investigation of drones … Read more

The post The Best Forensic Tool to Extract and Analyze Data of Drone/UAVs appeared first on Forensic Focus.

https://www.forensicfocus.com/news/the-best-forensic-tool-to-extract-and-analyze-data-of-drone-uavs/

Operator: Calling all units. A2 11, 675 Main. Backup needed.

Speaker 1: So we had two police forces combining their digital forensics to save money and increase efficiency. However, we soon realized we had a situation that we … Read more

The post Why a UK Police Force Adopted Frontline Solutions From MSAB appeared first on Forensic Focus.

https://www.forensicfocus.com/case-studies/why-a-uk-police-force-adopted-frontline-solutions-from-msab/

Session Chair: So the next speaker is Timothy. It’s going to be online, so Timothy, are you ready?

Timothy: Hi, everyone. So I’m Timothy Bollé, I’m a PhD student at the University of Lausanne. And today I will … Read more

The post Bridging the Gap: Standardizing Representation of Inferences in Diverse Digital Forensic Contexts appeared first on Forensic Focus.

https://www.forensicfocus.com/webinars/bridging-the-gap-standardizing-representation-of-inferences-in-diverse-digital-forensic-contexts/

Detego Global, creators of the award-winning Unified Investigations Platform that enables investigators to rapidly extract, analyze and report on critical data from 1,000s of devices and Digital Intelligence® Inc, a leader in the delivery of digital forensics and … Read more

The post Digital Intelligence Joins Forces with Detego for a Global Webinar Series appeared first on Forensic Focus.

https://www.forensicfocus.com/news/digital-intelligence-joins-forces-with-detego-for-a-global-webinar-series/

The new releases of XRY, XAMN and XEC come with full support for more devices, more apps, Coinbase Warrant Returns, plus an early access to new features.

Release Highlights XRY 10.2

XRY 10.2 brings significant extraction and decoding capabilities to … Read more

The post MSAB Announces Its Second Major Release for 2022: XRY 10.2, XAMN 7.2 and XEC 7.2 appeared first on Forensic Focus.

https://www.forensicfocus.com/news/msab-announces-its-second-major-release-for-2022-xry-10-2-xamn-7-2-and-xec-7-2/

Christa: Digital forensics in enterprises increasingly overlaps corporate investigations, e-discovery and incident response, with the result that enterprises themselves must balance data acquisition and retention with employee privacy and cyber security.

This week on the Forensic Focus podcast we’re … Read more

The post Cellebrite’s Monica Harris on Achieving Balance in Corporate Investigations and E-Discovery appeared first on Forensic Focus.

https://www.forensicfocus.com/podcast/cellebrites-monica-harris-on-achieving-balance-in-corporate-investigations-and-e-discovery/

Aikaterini: I’m Aikaterini Kanta. I’m a PhD candidate with University College Dublin, and I’m really glad to be here today. I’m going to talk to you about my PhD research. So, about contextual based decryption.

So, the average number … Read more

The post What Can You Tell Us About Your Password? A Contextual Approach appeared first on Forensic Focus.

https://www.forensicfocus.com/webinars/what-can-you-tell-us-about-your-password-a-contextual-approach/

Julie O’Shea: Hi, everyone. Thanks for joining today’s webinar: _Uncovering Windows Registry Data and the Latest Mac Artifact_s. I’m Julie O’Shea and I’m the Product Marketing Manager here at Cellebrite Enterprise Solutions. Before we get started, there are … Read more

The post Uncovering Windows Registry Data and the Latest Mac Artifacts appeared first on Forensic Focus.

https://www.forensicfocus.com/webinars/uncovering-windows-registry-data-and-the-latest-mac-artifacts/

Gaëtan Michelet: So good morning, everyone. Today I will present the project we are working on with Frank Breitinger and Graham Horsman. This project is “Towards a working definition and classification for automation in the context of digital forensic”. … Read more

The post Towards a Working Definition and Classification for Automation in Digital Forensics appeared first on Forensic Focus.

https://www.forensicfocus.com/webinars/towards-a-working-definition-and-classification-for-automation-in-digital-forensics/

It’s no secret that the rapid pace of digital transformation is placing increasing pressure on digital forensic investigators. For years, the technology landscape has been introducing new devices capable of holding and managing larger amounts of data, from tablets and … Read more

The post Exploring Detego’s Multiple Deployment Options appeared first on Forensic Focus.

https://www.forensicfocus.com/news/exploring-detegos-multiple-deployment-options/