Boost Your DFIR Investigative Mindset!
Brett Shavers With all the hype around Artificial Intelligence (AI) in Digital Forensics and Incident Response (DFIR), you might wonder …
Data Carving Xbox One using Belkasoft Evidence Center X
Viviane Cruz Paraphrasing Edmond Locard, the father of forensic computing: "every action leaves a trace," whether it's on cell phones, …
Navigating Data Recovery: Solutions, Pros, Cons, and Permanent Deletion Tips
Tharaka Singharage In today’s digital age, data recovery has become an increasingly important topic. While everything is functioning smoothly, we …
Getting Started in Cyber Security Forensics with AI and ChatGPT
Cyber security forensics, or digital forensics, is a crucial field within cyber security, focusing on the identification, preservation, analysis, and …
Reflections on Artificial Intelligence and Digital Forensics
An Artificial Intelligence is, basically, the association between an algorithm (or algorithms) and a set of data prepared for decision making. The algorithm is trained on this database and learns from that data. There are a variety of AIs applied from pattern recognition to the creation of images from certain guidelines passed to an algorithm by the end user.
Cryptography and the Frontier of Privacy
This article seeks to provide an in-depth exploration of the applications of cryptography in the context of cybersecurity. We'll cover a variety of complex and essential topics, including symmetric and asymmetric key cryptography, encryption algorithms, authentication protocols, digital signatures, and key management. In addition, we will examine practical use cases where encryption plays a critical role in mitigating cyberthreats, such as man-in-the-middle attacks, data tampering, and identity theft, and the contradictions with GDPR and LGPD regulations that have angered governments and law enforcement.
Digital Investigations: How to Make Big Data Small
Justin Tolman, Forensic Subject Matter Expert at Exterro, and Farand C. Wasiak, Digital Forensics Examiner and Criminal Investigator Today’s highly …
Boost Your DFIR Investigative Mindset!
Brett Shavers With all the hype around Artificial Intelligence (AI) in Digital Forensics and Incident Response (DFIR), you might wonder …
The CrowdStrike Falcon Platform - A Brief Analysis and Review
The search for effective antivirus tools is constant for businesses and common users. In our current scenario, NGAV (Next Generation Antivirus) antiviruses are becoming popular. To that end, this article brings a quick approach to CrowdStrike Falcon, which has been an easy-to-implement New Generation Antivirus, SaaS solution that serves endpoints and servers for the main platforms on the market: Linux, Windows and MAC. Centralized asset management is offered on the Falcon CrowdStrike platform.
Magnet Forensics, Magnet Axiom - A First Look
Magnet Axiom comprises Magnet Axiom Process and Magnet Axiom Examine, and Magnet.AI is also incorporated into Magnet Axiom for examiners to take advantage of when analysing evidence. This article aims to introduce readers to Magnet Axiom, how to process computer and mobile sources with Axiom Process, discuss the processing options Axiom provides as well as cover some of the more important features relevant to a forensic examination offered with Axiom Examine.
Steganography – A Hidden Reality Far Beyond What The Eyes Can See
Steganography is an ancient secret communication technique that consists of hiding messages within other means of communication, such as images, texts, or physical objects. The term "steganography" derives from the Greek words "steganos" (hidden or covered) and "graphein" (to write), reflecting its nature.
Hunting for macOS Ransomware Using VirusTotal Enterprise
ARRR-Ransomware for macOS be-out there ‘laddies’, and we are going to find it! Join me as we embark on a wild adventure to sail the deepest and darkest seas on the hunt for macOS ransomware. BONUS: We’ve added a surprise for the latest ransomware for macOS, which occurred during the preliminary writing of this article.
Windows Digital Cyber-Crime Forensics Investigation
This article mainly covers a lot about Windows Forensics in-depth and while there are other forensics for operating systems such as iOS, Mac OS and Linux. They’ve not specifically been covered here. There’s even malware analysis which is a broader topic covering each operating system, which I’ll make an article about soon as well. Nonetheless, I hope this article helps you understand more about Windows Forensics and helps you kick-start your journey in investigating cyber-crime in the Windows world.
Interview with Alameen Karim Merali
CHFI | CompTIA | Cyber-security | OSINT | Medical | Social Engineering | Mobile Security | Threat Intelligence | Alameen …
Interview with Andreas Mueller, founder, and COO of Downstreem
Noncompete agreements have been around since 1811 and were designed to prevent employees from freely switching jobs and taking secure company information, such as client contracts, patents and personal data.
Imaging an Android Smartphone Logically
Android devices, when doing logical imaging, can need some coaxing to get them to where they are going to communicate with your forensic workstation. Android has a large variety of devices as well as different versions of Android itself. When you look at the setup steps, they are typical for Android, Android Oxygen, and Android Go. When working with the Android device, remember that if your forensic workstation cannot see it, neither can your tool. One of the tips I find helpful is to keep the Device Manager open when working with an Android. This allows you to see the device from the workstation’s perspective and how it is being loaded into the operating system.
From Sci-Fi to Crime-Solving: How AI is Transforming Digital Forensics for Law Enforcement
Introduction Imagine a world where detectives have access to a high-tech assistant that can sift through mountains of digital data …
LeakSearch
In this article, we will use LeakSearch to leverage the COMB (Combination Of Many Breaches) data breach database. The COMB …
Data Carving Xbox One using Belkasoft Evidence Center X
Viviane Cruz Paraphrasing Edmond Locard, the father of forensic computing: "every action leaves a trace," whether it's on cell phones, …
Geolocation with Huntintel.io
Geolocation still plays a critical role in terms of investigations (OSINT, journalism, law enforcement, etc.). Being able to determine and place an individual or individuals in a location and tie them to a time, day, and/or an event helped investigators in such cases as identifying Capital rioters, hate group members, and other potentially dangerous situations. HuntIntel is a tool that, while in its early stages, shows promise in terms of making geolocation easier.
Getting Started in Cyber Security Forensics with AI and ChatGPT
Cyber security forensics, or digital forensics, is a crucial field within cyber security, focusing on the identification, preservation, analysis, and …
Analyzing Malware Mobile Apps with VirusTotal Enterprise Online and Kali Linux Locally
In this article, we’ll be hunting mobile malware using VirusTotal Enterprise, and analyzing a mobile malware sample found using the tools in the latest version of Kali Linux.
Tools Used For Space Satellite Forensics
Satellites are crucial in modern communication, navigation, weather forecasting, and national security. As our dependence on satellite technology grows, so does the potential for malicious activities, including hacking and unauthorized access. Space satellite forensics has emerged as a vital field in investigating and mitigating the impact of satellite attacks. In this article, we delve into space satellite forensics, exploring the challenges faced and the tools used to investigate satellite hacking incidents.
Four Ways to Craft a Defensible Narrative with Digital Forensics
As many digital investigators have come to appreciate firsthand, the primary challenge of a modern investigation is not the scarcity of evidence in a case but rather the overwhelming abundance of it. To secure a conviction is not simply a matter of gathering and preserving mountains of digital evidence, but also connecting a constellation of data points so that a prosecutor or trial lawyer can reveal the story that’s hidden within the data. In this context, small but telling details like a defendant’s location on a specific date and time or the last phone call the defendant made just minutes before the incident occurred can become crucial to creating a logical narrative that is defensible in court.
Boost Your DFIR Investigative Mindset!
Brett Shavers With all the hype around Artificial Intelligence (AI) in Digital Forensics and Incident Response (DFIR), you might wonder …
Data Carving Xbox One using Belkasoft Evidence Center X
Viviane Cruz Paraphrasing Edmond Locard, the father of forensic computing: "every action leaves a trace," whether it's on cell phones, …
Navigating Data Recovery: Solutions, Pros, Cons, and Permanent Deletion Tips
Tharaka Singharage In today’s digital age, data recovery has become an increasingly important topic. While everything is functioning smoothly, we …
Getting Started in Cyber Security Forensics with AI and ChatGPT
Cyber security forensics, or digital forensics, is a crucial field within cyber security, focusing on the identification, preservation, analysis, and …
Deepfake Audio: A Comprehensive Study in Digital Forensics Course Online (W62)
This course is aimed at presenting an elementary yet comprehensive picture of the field of digital audio forensics, with the implied hope that it will afford the participant useful theoretical and practical knowledge of the field and its various aspects.
DFIR in AWS (W63)
This course provides a crucial skill set in securing AWS environments. In today's digital landscape, understanding digital forensics, incident response, and automation in AWS is essential for safeguarding data and infrastructure. This course offers hands-on experience, making it an invaluable asset for those eager to enhance their cybersecurity expertise and stay ahead in the dynamic field of cloud security.
Micro-drone Warfare: Cybersecurity Implications and Countermeasures (W61)
"Micro-drone Warfare: Cybersecurity Implications and Countermeasures" is an advanced course designed for digital forensics professionals seeking to understand the cybersecurity challenges posed by the increasing use of micro-drones in modern warfare. The course provides an in-depth exploration of micro-drone technologies, their role in cyber threats, and the countermeasures necessary to mitigate these threats. Learners will delve into the various types and capabilities of micro-drones, their communication and networking technologies, and the associated cybersecurity vulnerabilities. The course covers risk assessment and threat modeling for micro-drone systems, analysis of real-world micro-drone warfare scenarios, and the development of defense strategies against potential cyber attacks. Additionally, the course addresses the legal and policy frameworks governing micro-drone warfare cybersecurity, including ethical considerations, privacy implications, and international regulations. The course is led by Rhonda Johnson, a seasoned educator and Ph.D. student specializing in Cybersecurity. Prior knowledge of computer networks, cybersecurity principles, operating systems, basic electronics, and wireless communication is recommended. The course employs tools such as Drone Simulators and Drone Performance Evaluation Tools for practical learning.
Data Integrity And Evidence Handling in Digital Forensics - Course Online (W60)
The course is intended for individuals from the IT industry as well as those outside of it who have some knowledge of cybersecurity. Basic concepts of cybersecurity are required. During the course, participants will acquire skills related to: Understanding digital forensics, including its scope, relevance in investigations, and legal and ethical considerations. Concepts of data integrity and its significance in digital forensics. They will learn about various threats to data integrity and techniques for ensuring its preservation throughout the forensic process. Principles of evidence handling, including chain of custody, documentation, and the importance of maintaining the integrity of evidence. Legal and ethical considerations related to digital evidence handling. This includes understanding privacy and confidentiality considerations and the role of expert witness testimony in courtroom presentations. Data acquisition techniques for different types of digital devices. They will learn about disk imaging, integrity verification, and the use of hash functions in maintaining data integrity. Techniques for analyzing and examining digital evidence, including file system analysis, data recovery, reconstruction techniques, and metadata analysis. The course also includes practical application of various tools and technologies used in digital forensics, such as Autopsy, The Sleuth Kit (TSK), Volatility, Plaso, Wireshark, Bulk Extractor, OSForensics, and Autopsy Browser. At the end of the course, a final exam is planned consisting of multiple-choice questions on the concepts and fundamentals arising from the course outcomes, along with practical tasks.
