Episode 31 – They try to send me off to DC but I say R-M-O
Today we cover Paul Sanderson's blog post on forensic practitioners, how the current financial situation… [more]
SANS Forensic Summit
Last week I attended the SANS Forensic Summit in Washington DC. What an experience it was. I got to meet… [more]
Lessons from Data Recovery – Part 1 (Repost)
I originally posted this entry over on the Disklabs computer forensic forum (http://www.computer-forensics.co.uk/computer-forensics-forums/forum.php)… [more]
Extreme Hexjumping Video
A few weeks ago I posted a picture of Martin Westman just before he jumped out of a plane while hex-dumping… [more]
Episode 30 – Amy Winehouse is no Forensic Guru
The Forensic 4cast Awards, AccessData merges with CT summation, Google may face prosecution over wiretapping… [more]
News
Last week I attended the SANS Forensic Summit in Washington DC. What an experience it was. I got to meet many people for the first time including Mark McKinnon, Joe Garcia, Brian Moran, and Rob Lee (if I listed everyone people would get bored reading, sorry). The event itself was fantastic I was able to [...]
Last night we held the second annual Forensic 4cast Awards at the SANS Forensic Summit in Washington DC. It was tremendous fun and was broadcast live by SANS on their website. If you want to see their coverage of the event you can do so here https://www.sans.org/webcasts/live-forensic-4cast-awards-ceremony-93653. I will be posting video of the event [...]
The Forensic 4cast Awards will take place on Thursday evening in Washington DC (have I mentioned that before?) and the voting closes tomorrow. If you have not yet taken the time to place your votes please do. Most of the voting is EXTREMELY close and one or two votes can make all the difference. You [...]
Read More Posts From This CategoryMethodologies & Best Practice
A few weeks ago I posted a picture of Martin Westman just before he jumped out of a plane while hex-dumping a phone. He has been in touch and sent a link to the Youtube video. I asked Martin if he has any more plans to do things like this in the future and he [...]
If my work with Volume Shadow Copies has taught me one thing it is that I don’t know anything. I have often said the more I learn, the less I know. Everything that we learn about computer investigations leads to more learning. It never ends. Anyone that thinks they know everything there is to know [...]
Simon explains the possible pitfalls of ignoring metadata
Read More Posts From This CategoryTechnical Articles
I originally posted this entry over on the Disklabs computer forensic forum (http://www.computer-forensics.co.uk/computer-forensics-forums/forum.php) but also thought a lot of people would benefit from it being repeated here too. I’ve been working at Disklabs for a few weeks now. I’ve mostly been confined to the digital forensics lab but I’ve been able to poke my head [...]
Lee Whitfield gives insight into Microsoft Volume Shadow Copies and shows how to extract meaningful data by manually deconstructing these files.
Lee provides a brief overview of what he found interesting from his Mac forensic training.
Read More Posts From This CategoryProduct Reviews
F-Response TACTICAL is now available but is it as good as its predecessors?
Read More Posts From This CategoryPodcast Episodes
Today we cover Paul Sanderson’s blog post on forensic practitioners, how the current financial situation is affecting forensics, tips for graduates trying to get into the field, the SANS Forensic Summit, and the Forensic 4cast Awards.
Episode 31 - They try to send me off to DC but I say R-M-O [77:27m]: Play Now | Play in Popup | DownloadThe Forensic 4cast Awards, AccessData merges with CT summation, Google may face prosecution over wiretapping laws, and we talk about what to do if you child porn on your company server.
CEIC 2010, Tableau and Guidance, SANS Forensic Summit and the 4cast Awards

