Forensic Toolkit v3 Tips and Tricks – Re-indexing a case

by Brian K.Glass This is the first in a series of articles that will cover topics concerning AccessData Forensic Toolkit (FTK) version 3. S...

Is your client an attorney? Be aware of possible constraints on your investigation. (Part 1 of a multi-part series)

by Sean L. Harrington Significant legal and ethical challenges confront digital forensics investigators, for which some may not be well pr...

Publishing articles at Forensic Focus

Forensic Focus is always keen to publish articles, papers or blog posts of interest to the digital forensics community. Articles are publis...

What is “good enough” information security?

by Simon Biles I have, occasionally in the past, mentored people in (on?) Information Security – once for money (this is not a revenue str...

Obtaining Information from Mobile Devices in Criminal Investigations

by David W. Bennett Mobile device forensics is the process of recovering digital evidence from a mobile device under forensically sound con...

An in-depth analysis of the cold boot attack: Can it be used for sound forensic memory acquisition?

by Richard Carbone The purpose of this technical memorandum is to examine the technical characteristics behind the cold boot attack techniq...

Google History Forensics

by Craig Ball About the Author Craig Ball is a Texas lawyer who limits his practice to service as a court-appointed special maste...