Search results

  • We encourage our users to use Real Names to build a real community, friendships and networking opportunities.

    [more information]
  1. RobertM

    How do I transition from Government to Private Sector?

    Hey @jwailes Great discussion to start. I think you will be following in the footsteps of many ex officers/ From my experience, the Cellebrite certs are good to have for court, but if you use Cellebrite, you shouldn't have an issue passing the tests. At least when I took them (Logical and...
  2. RobertM

    Legal issue

    Free software should never be an issue, as far as I know, if you can show that it works properly as a result of testing. As with any software, you can't just push a button (Push-button Forensics) and accept the output as the answer and then present that in court. You must test and validate the...
  3. RobertM

    DFIR Book Share Challenge

    eBooks, Ultimate Guide to X-Ways, Video Training Courses and now a podcast ... For $20 /month? Plus an increased chance to win great books like the one above? This is why I am a proud Patreon member for DFIR Training. DFIR Training is creating Digital Forensics / Incident Response Training...
  4. RobertM

    Convincing Top Management - DFIR Readiness

    I think this could be an excellent start. Remember, when talking to management, they don't want to or will they read a 20-page report about something they don't want to believe. You have to create a 1 or 2-page document highlighting key breaches and ransomware attacks on businesses that are...
  5. RobertM

    17025 for Digital Forensics - Does it make sense?

    I think you have a ton of great ideas in this post. The key is a clear line between scientific procedures and day to day work with detailed SOP's for how the work should be completed taking into account the many complexities of the data we deal with.
  6. RobertM

    17025 for Digital Forensics - Does it make sense?

    I think community driven is the key here. As we've seen with the recent news regarding the Japanese Cyber-Security Minister (Japan's cyber-minister 'never used computers'), many countries have people in power making decisions that don't really understand the issues or HOW technology can help...
  7. RobertM

    Challenges Digital Forensic Investigators face today in the Cloud

    @azuleonyx : This is an excellent point and hopefully my original post was clear that I am only speaking from the perspective of the outside perimeter of security around your data. As a business, you are responsible for properly encrypting all sensitive data both in transit and at rest. Cloud...
  8. RobertM

    Cyber Forensic Investigation

    Lots of great information @Lids If doing a cloud acquisition, I don't see many people actually checking to see where the data is located or even knowing how to determine this. Assumption: the person has the username/password for a service like Gmail or Twitter and legal authority within...
  9. RobertM

    Challenges Digital Forensic Investigators face today in the Cloud

    This is similar to a question we had from a client that was looking to host with us, but was worried about storing their data in the cloud. Essentially, they stated that they would never host their data in the cloud. What I attempted to point out to him was that the majority of internal work...
  10. RobertM

    Decrypt iOS notes (w/ Hashcat & Cellebrite's Physical Analyzer)

    Great video! Nice and clear steps to decrypting notes in the notestore.sqlite database. Would it be correct to assume this wouldn't work if the user encrypted the notes using his fingerprint (Touch ID)?
  11. RobertM

    One reason why Hunchly has become so popular...Court Decision

    I think this is one of the key points of the decision. The need for proper evidence handling of electronic artefacts and evidence. Especially when court cases can be months, if not years away. One of the main issues with Snagit (although I love the application for other uses), is the fact the...
  12. RobertM

    Vehicle Forensics

    What type of information are you able to obtain from Apple Car Play? I thought that it would be minimal while using the phone as the main storage device. Is a lot of information downloaded into the car system when connected?
  13. RobertM

    Starting Computer Forensics & have some questions

    1. What do you like and dislike about this field? Always something new to learn and discover. This is both a positive and a negative, especially when you learn something new for one investigation, but then don't use those skills for 6 months to a year. It can be hard to keep up with the...
  14. RobertM

    Official Launch is Friday October 19th.

    Official Launch is Friday October 19th.

About us

  • Our community began in 2004. Since this time, we have grown to have over 29,000+ members within the DFIR & Cyber Security community.

    We are happy to announce that this forum is now under new ownership with the goal to once again become the main Digital Forensics Forum on the internet for DFIR, OSINT and Cyber Security.

    If you can think of ways to help us improve, please let us know.

    We pride ourselves on offering unbiased, critical discussion among people of all different backgrounds.

    We are working every day to make sure our community is one of the best.

Quick Navigation

User Menu