Is your client an attorney? Be aware of possible constraints (Part 2)

by Sean L. Harrington "In my first post several weeks ago, I discussed some of the special obligations that digital forensics investi...

Forensic Toolkit v3 Tips and Tricks ― Not on a Budget

by Sean L. Harrington "A couple of weeks ago, Brian Glass posted a very helpful comment, Forensic Toolkit v3 Tips and Tricks — on a B...

Android Forensics Study of Password and Pattern Lock Protection

Posted by Oxygen Software "Let’s see what Pattern Lock is, how to access, determine or even get rid of it? We’ll also speak about Pas...

iPhone Tracking – from a forensic point of view

Posted by 4rensiker "iPhoneTracking is sexy! Every mobile forensic suite, at least the ones dealing with iPhones, are providing it pr...

Forensic Toolkit v3 Tips and Tricks – On a budget

Posted by Brian K. Glass "While researching FTK 3X and Oracle, you just recently discovered that the best configuration of your Oracle...

Skype in eDiscovery

by Stuart Clarke, 7Safe "The EDRM (Electronic Discovery Reference Model) is a widely accepted workflow, which guides those involved i...

Anonymous, what does it mean?

Posted by forens245 "Anonymous, a word which Merriam-Webster describes as: of unknown authorship or origin, not named or identified, ...

YouDetect – Implementing the principles of statistical classifiers and cluster analysis for the purposes of classifying illegally acquired multimedia files

Author: Jonathan Murphy, 7Safe Whilst all instances of the illegal acquisition of multimedia are not known, it is not possible to gain a c...

Advice for Digital Forensics Job Seekers

by Joe Alonzo You see the job advertisements posted on the web everyday, Digital Forensics Analyst, Internet Investigator, Computer Forens...

Forensic Toolkit v3 Tips and Tricks – Re-indexing a case

by Brian K.Glass This is the first in a series of articles that will cover topics concerning AccessData Forensic Toolkit (FTK) version 3. S...

Is your client an attorney? Be aware of possible constraints on your investigation. (Part 1 of a multi-part series)

by Sean L. Harrington Significant legal and ethical challenges confront digital forensics investigators, for which some may not be well pr...

Publishing articles at Forensic Focus

Forensic Focus is always keen to publish articles, papers or blog posts of interest to the digital forensics community. Articles are publis...

What is “good enough” information security?

by Simon Biles I have, occasionally in the past, mentored people in (on?) Information Security – once for money (this is not a revenue str...

Obtaining Information from Mobile Devices in Criminal Investigations

by David W. Bennett Mobile device forensics is the process of recovering digital evidence from a mobile device under forensically sound con...

An in-depth analysis of the cold boot attack: Can it be used for sound forensic memory acquisition?

by Richard Carbone The purpose of this technical memorandum is to examine the technical characteristics behind the cold boot attack techniq...

Google History Forensics

by Craig Ball About the Author Craig Ball is a Texas lawyer who limits his practice to service as a court-appointed special maste...

Important Changes to "Articles & Papers" Section

From today, the section where we display user submitted articles and research papers is changing significantly. Users will now be able to ...

Interview with Scott Burkeman, Warner Scott Recruitment

Scott is a Director at Warner Scott Recruitment in London, specialising in computer forensics recruitment throughout the UK and abroad. For...

Scott Moulton’s “5-Day Data Recovery Expert Certification” Course

reviewed by by Karlo Arozqueta http://www.myharddrivedied.com/data-recovery-training Just about every individual who is immersed in the In...

Standard Units in Digital Forensics

by Chris Hargreaves About the Author Dr Chris Hargreaves is a lecturer at the Centre for Forensic Computing at Cranfield Universit...

PitchLake - a tar pit for scanners

by Simon Biles About the Author Simon Biles is a founder of Thinking Security Ltd. , an Information Security and Risk Management c...

The End of Digital Forensics?

by Craig Ball About the Author Craig Ball is a Texas lawyer who limits his practice to service as a court-appointed special maste...

Fragmentation of the digital forensics community

From the forums: I started in the digital forensics community about five years ago, and I already feel old, and I am a Johnny-come-lately. ...

Evaluating Mobile Telephone Connection Behaviour - Part 2

by Sam Raincock Sam Raincock from SRC is an IT and telecommunications expert witness specialising in the evaluation of digital ev...

Biles’ Hierarchy of Disaster Recovery Needs

by Simon Biles Having failed to keep up with my New Year’s resolution of being more organised (the observant of you might have noticed the ...

Geotags: Friend or Foe?

by David Benford Director, Blackstage Forensics David Benford I recently wrote a research paper, “Geotag Data: The Modificatio...

Computer forensics to die out by 2020

Somewhat contrary to expectations, I was interested to see that a search for "computer forensics" using Google's Insights for ...

Is the NTSB a model for incident response?

by Sean McLinden Recently, the events surrounding the defacement of the HBGary Web site and publication of sensitive data were being bante...

Interview with Ben Findlay, North Yorkshire Police Hi Tech Crime Unit

"Many people are familiar with the concept and importance of validating and verifying (V&V) results (and the difference between t...

Challenges of Smart Phone Forensics

by Rob Adams "Mobile devices have become an essential component of our daily lives. These devices keep us connected and act as so muc...

"I'm here! Now what?"

by Ken Pryor "Working for a small police department in a rural area, my opportunities to do digital forensic work on real cases are mu...

Test Images and Forensic Challenges

A list of sample images and forensic challenges is now available at: http://www.forensicfocus.com/images-and-challenges Additions are encour...

Evaluating Mobile Telephone Connection Behaviour - Part 1

by Sam Raincock Examining Mobile Equipment – Ensuring Accuracy In general, all modern mobile telephones contain call information and SMS ...