DFI News logo

Your weekly news source for professionals working in digital forensics.

Image of a pencil eraser being applied to a hard disk platter
April 3, 2009

Product Focus

Techno Security just $600 with AccessData Users' Ticket!

Get admission to Techno Security with exclusive pre-registration for hands-on labs in the AccessData lab track.

Call AccessData® now to register or to purchase a pre-conference training package!

Conference passes may also be purchased on the Techno Security website by entering promo code ACCESSDATA and entering $600 as the payment amount.

800.574.5199 (US) +1.801.377.5410 ext 201 (Int’l)

accessdata.com/aduc.html

Industry Calendar

To submit an event, please email editors@DFInews.com.

April 7-9, 2009

Cell Phone and Portable Storage Forensics

Houston, TX

www.gohtci.com

April 13-15, 2009

Cell Phone Forensics I Washington, DC

h11-digital-forensics.com

April 15-16, 2009

8th Annual Security Conference

Las Vegas, NV

security-conference.org

April 20-21, 2009

Legal IT

Montreal, Canada

www.legalit.ca

April 20-24, 2009

EDAS Bootcamp

Tampa, FL

www.gohtci.com

April 27-29, 2009

The Computer Forensics Show

Washington, DC

computerforensicshow.com

April 27-29, 2009

eDiscovery

San Francisco, CA

ediscoveryevent.com

May 5–7, 2009

Cell Phone Forensics

Pittsburgh, PA

bkforensics.com

May 17-20, 2009

CEIC 2009

Orlando, FL

www.ceicconference.com

May 17-21, 2009

CSI SX 2009

Las Vegas, NV

www.csisx.com

May 20-22, 2009

ADFSL Conference

Burlington, VT

digitalforensics-conference.org

May 22, 2009

SADFE

Oakland, CA

conf.ncku.edu.tw/sadfe/

May 26-30, 2009

Mobile Forensics World

Chicago, IL

mobileforensicsworld.com

May 31-June 3, 2009

Techno Security Conference

Myrtle Beach, SC

www.techsec.com

June 28 – July 3, 2009

FIRST

Kyoto Japan

www.first.org

July 7-9, 2009

Cell Phone Forensics II Washington, DC

h11-digital-forensics.com

July 12-14, 2009

20th Annual ACFE Fraud Conference & Exhibition

Las Vegas, NV

www.fraudconference.com

July 25–28, 2009

USA 2009 - Black Hat

Las Vegas, NV

www.blackhat.com

August 3-5, 2009

Computer Forensics Show

San Jose, CA

computerforensicshow.com

August 13-14, 2009

Third International Workshop on Computational Forensics

The Hague, The Netherlands

iwcf09.arsforensica.org

August 17–19, 2009

Digital Forensic Research Workshop

Montreal, Canada

www.dfrws.org

August 23-26, 2009

2009 HTCIA International Training Conference

Lake Tahoe, CA

www.htcia.org

Sep 30 - Oct 2, 2009

1st International ICST Conference on Digital Forensics & Cyber Crime

Albany, NY

www.d-forensics.org

October 23-24, 2009

A National Symposium on the Collection, Analysis and Legal Applications of Digital Evidence - The Cyril H. Wecht Institute of Forensic Science and Law

Pittsburgh, PA

www.forensics.duq.edu

October 26-28, 2009

2009 Techno Forensic Conference

Gaithersburg, MD

www.techsec.com

November 8-11, 2009

PFIC 2009

Park City, UT

www.pfic2009.com

Dalai Lama’s Office Computers Hacked

A virtual spy network, being dubbed "GhostNet," has remotely penetrated over 1,295 computers in 103 countries. Up to 30% of the infected hosts are considered high-value targets and include computers located at ministries of foreign affairs, embassies, international organizations, news media, and NGOs.

In the News

Browsing History Evidence in Explosives Trial

On the last day of testimony in the trial of a former college student accused of transporting explosives, jurors heard about the browsing history on the defendant's desktop computer.

New York Police Unit Specializes in Computer Crimes

If there's evidence of a crime buried inside a computer, the members of the New York State Police Computer Crime Unit will probably find it, a local prosecutor said last week. This unit finds computer evidence that has helped solve a myriad of crimes, from child porn to forgery, from Internet stalking to homicide.

Automate the Forensics Process with Open Computer Forensics Architecture

The Dutch police have developed the Open Computer Forensics Architecture (OCFA) as an open source tool for professional criminal investigators. Dutch authorities use the modular OCFA framework for forensic investigations.

Romanian Pentagon Hacker Arrested

After a three-year search, a 23-year-old man suspected of having hacked into Department of Defense systems in 2006 has finally been arrested in Iasi, Romania, by the local police and the Direction for Investigating Organized Crime and Terrorism (D.I.I.C.O.T.).

A Rising Number of Internet Predators Challenge Agents

Over the past decade, agents and computer experts have gone after hundreds of people who solicit sex from kids or trade child pornography online. Police efforts around the country were all the rage with the media in the early 2000s, but, despite the publicity then and now, the bad guys haven't gone away. They've quietly multiplied.

E-discovery Gets an F

E-discovery in the age of Web 2.0 has a long way to go, according to industry experts, who recently convened at a Symantec Inc.-hosted Webinar to bemoan the state of record compliance in enterprises today.

People & Business

Houston-Area Digital Forensics Firm Achieves ASCLD Accreditation

CyberEvidence, a private digital forensic firm, has attained the prestigious American Society of Crime Laboratory Directors/Laboratory Accreditation Board (ASCLD/LAB) accreditation after a rigorous year-long evaluation process by an independent ASCLD/LAB team.

FINALDATA Releases its Updated FINALMobile Forensics 2.1

FINALDATA has released its updated FINALMobile Forensics 2.1, a forensics investigative tool for CDMA phones that retrieves comprehensive data such as deleted items, lock codes, and SMS messages.

Digital Evidence Conference Speakers Confirmed

The Cyril H. Wecht Institute of Forensic Science and Law is pleased to announce that the following speakers have been confirmed for their Digital Evidence Conference on October 23-24, 2009.

MacForensicsLab Inc. releases MacLockPick 2.1

MacForensicsLab Inc. released an upgrade to their cross-platform digital forensic field tool. In addition to extracting suspect evidence from Windows and Mac OS X systems, MacLockPick 2.1 now extracts data from Linux systems too.

In the Blogs

Judges Define Admissibility of Hard Drive Evidence

Hard drive imaging has many privacy concerns, covering everything from tax information, credit card numbers, and potentially numerous irreverent data. There is a growing body of case law over the last three years on the imaging of hard drives.

A Day in the Life of Data

Follow the multitude of ways an individual is tracked in a single day and the way various governments are able to use this personal information in their investigations. This blog raises excellent questions on the ways we collect personal data and the uses we put it to.

Extracting Binary Files with NetworkMiner

Last week, I posted an entry about pulling binaries from pcap files. In the post, I mentioned that NetworkMiner could be used to extract binary files from pcaps automatically, in talking to Erik Hjelmvik, NetworkMiner developer, I learned a much easier way to extract binaries from pcaps using Wireshark.

4th Circuit Ruling on Illegal e-Discovery Adds Teeth to Federal Anti-Hacker Email Privacy Law

The Fourth Circuit Court of Appeals has strengthened federal anti-hacker email privacy law by allowing a civil suit for punitive damages alone, even when there are no actual damages.

Windows FE: Forensically Sound?

Windows FE has been gaining a bit of attention lately across the forensic blog-o-sphere. My interest primarily in Windows PE, as well a secondary interest in Windows forensics (as applied to sysadmin tasks) got me digging for more details on the rare object. A recurring question has been, is Windows FE forensically sound.

More news and information available at
DFInews.com