Clik here to view.
Email Evidence – Now You See it, Now You Don’t!
First published October 2008 By Sandy Boucher and Barry Kuang, Intelysis Corp. Background With the ever increasing role of computers and electronic communications in both our business and personal...
View ArticleClik here to view.
Unusual devices
First published June 2010 by Sean McLinden In 2007, New Jersey Governor Jon Corzine made the news twice for a single event. The first time was the report of a car accident on the Garden State Parkway...
View ArticleClik here to view.
Things a Little Birdie Told Me: The Implications of Twitter and other Social...
by Elluma Discovery Facebook, Twitter, and a growing number of social media sites have taken over our lives. Whether Tweeting about the Kardashians or ranting over the latest brouhaha between Snookie...
View ArticleClik here to view.
Skype in eDiscovery
Author: Stuart Clarke, 7Safe The EDRM (Electronic Discovery Reference Model) is a widely accepted workflow, which guides those involved in eDiscovery. Typically, the identification and collection...
View ArticleClik here to view.
Forensic Imaging of Hard Disk Drives- What we thought we knew
By Todd G. Shipley and Bryan Door (A complete copy of this white paper and its figures and diagrams can be found at www.nfdrtc.net). WHAT WE HAVE BEEN TAUGHT Imaging of hard drives has been the main...
View ArticleClik here to view.
Overcoming Potential Legal Challenges to the Authentication of Social Media...
By John Patzakis1 Summary: Social media evidence is highly relevant to most legal disputes and broadly discoverable, but challenges lie in evidentiary authentication without best practices technology...
View ArticleClik here to view.
689 Published Cases Involving Social Media Evidence (with full case listing)
The torrent of social media evidence continues to grow. In November 2011 we, at X1 Discovery, searched online legal databases of state and federal court decisions across the United States to identify...
View ArticleClik here to view.
Key Twitter and Facebook Metadata Fields Forensic Investigators Need to be...
Authentication of social media evidence can present significant challenges when you collect by screen shots, printouts or raw html feeds from an archive tool. This is just one reason why social media...
View ArticleClik here to view.
Digital Forensics and eDiscovery Employment – The State of the Market 2012
Forensic Focus recently asked a number of digital forensics and eDiscovery recruitment specialists to comment on the current state of the employment market. Here are their thoughts, please leave your...
View ArticleClik here to view.
Authenticating Internet Web Pages as Evidence: a New Approach
By John Patzakis [1] and Brent Botta [2] Previously, in Forensic Focus, we addressed the issue of evidentiary authentication of social media data (see previous entries here and here). General Internet...
View ArticleClik here to view.
Generating computer forensic supertimelines under Linux: A comprehensive...
When the authors first published this paper, their intentions were to develop a comprehensive guide to digital forensic timelines in order to consolidate the many fragmented sources of information...
View ArticleClik here to view.
Evernote from a Forensic Investigation Perspective
by Stuart Clarke, Millnet Recently we have been looking at Evernote from a forensic investigation perspective, as we feel it is a great product which will grow in popularity therefore wanted to share...
View ArticleClik here to view.
Collecting and Processing Bloomberg Data
A few years ago, Bloomberg data may have been relatively unusual, however today we see Bloomberg chat and email data being collected quite frequently. Not a surprise really considering some of the...
View ArticleClik here to view.
Windows 8: Important Considerations for Computer Forensics and Electronic...
Introduction Documents identified by computer forensic investigations in civil litigation typically require review and analysis by attorneys to determine if the uncovered evidence could support causes...
View ArticleClik here to view.
What are ‘gdocs’? Google Drive Data
As “the Cloud” (a varied mix of internet based services ranging from web-based email accounts, on-line storage and services that synchronise data across multiple computers) becomes more relevant and...
View ArticleClik here to view.
What are ‘gdocs’? Google Drive Data – part 2
Following up from the recent post on Google Drive, designed to give a high level introduction to the product, this post will delve a bit deeper into the technical issues relating to the data stored and...
View ArticleClik here to view.
KS – an open source bash script for indexing data
KS – an open source bash script for indexing data ABSTRACT: This is a keywords searching tool working on the allocated, unallocated data and the slackspace, using an indexer software and a database...
View ArticleClik here to view.
OS X Mavericks Metadata
Apple recently released the newest version of their desktop operating system, Mac OS X Mavericks. As a free update to all supported Apple desktops and laptops, a wide adoption rate was expected, and...
View ArticleClik here to view.
WhatsApp – discovering timestamps of deleted messages
ABSTRACT: This is a procedure for locating and parsing deleted messages timestamps in Android WhatsApp database. I did a little reverse engineering, using the hexadecimal tool of Physical Analyzer...
View ArticleClik here to view.
Forensics Europe Expo 2014 – Recap
Forensic Focus attended the Forensics Europe Expo at Kensington Olympia on the 29th & 30th of April. This article is a recap of some of the main highlights and over the next few weeks we will also...
View Article
