A virtual spy network, being dubbed "GhostNet," has remotely penetrated over 1,295 computers in 103 countries. Up to 30% of the infected hosts are considered high-value targets and include computers located at ministries of foreign affairs, embassies, international organizations, news media, and NGOs.
On the last day of testimony in the trial of a former college student accused of transporting explosives, jurors heard about the browsing history on the defendant's desktop computer.
New York Police Unit Specializes in Computer Crimes
If there's evidence of a crime buried inside a computer, the members of the New York State Police Computer Crime Unit will probably find it, a local prosecutor said last week. This unit finds computer evidence that has helped solve a myriad of crimes, from child porn to forgery, from Internet stalking to homicide.
Automate the Forensics Process with Open Computer Forensics Architecture
The Dutch police have developed the Open Computer Forensics Architecture (OCFA) as an open source tool for professional criminal investigators. Dutch authorities use the modular OCFA framework for forensic investigations.
After a three-year search, a 23-year-old man suspected of having hacked into Department of Defense systems in 2006 has finally been arrested in Iasi, Romania, by the local police and the Direction for Investigating Organized Crime and Terrorism (D.I.I.C.O.T.).
A Rising Number of Internet Predators Challenge Agents
Over the past decade, agents and computer experts have gone after hundreds of people who solicit sex from kids or trade child pornography online. Police efforts around the country were all the rage with the media in the early 2000s, but, despite the publicity then and now, the bad guys haven't gone away. They've quietly multiplied.
E-discovery in the age of Web 2.0 has a long way to go, according to industry experts, who recently convened at a Symantec Inc.-hosted Webinar to bemoan the state of record compliance in enterprises today.
Houston-Area Digital Forensics Firm Achieves ASCLD Accreditation
CyberEvidence, a private digital forensic firm, has attained the prestigious American Society of Crime Laboratory Directors/Laboratory Accreditation Board (ASCLD/LAB) accreditation after a rigorous year-long evaluation process by an independent ASCLD/LAB team.
FINALDATA Releases its Updated FINALMobile Forensics 2.1
FINALDATA has released its updated FINALMobile Forensics 2.1, a forensics investigative tool for CDMA phones that retrieves comprehensive data such as deleted items, lock codes, and SMS messages.
The Cyril H. Wecht Institute of Forensic Science and Law is pleased to announce that the following speakers have been confirmed for their Digital Evidence Conference on October 23-24, 2009.
MacForensicsLab Inc. released an upgrade to their cross-platform digital forensic field tool. In addition to extracting suspect evidence from Windows and Mac OS X systems, MacLockPick 2.1 now extracts data from Linux systems too.
Judges Define Admissibility of Hard Drive Evidence
Hard drive imaging has many privacy concerns, covering everything from tax information, credit card numbers, and potentially numerous irreverent data. There is a growing body of case law over the last three years on the imaging of hard drives.
Follow the multitude of ways an individual is tracked in a single day and the way various governments are able to use this personal information in their investigations. This blog raises excellent questions on the ways we collect personal data and the uses we put it to.
Last week, I posted an entry about pulling binaries from pcap files. In the post, I mentioned that NetworkMiner could be used to extract binary files from pcaps automatically, in talking to Erik Hjelmvik, NetworkMiner developer, I learned a much easier way to extract binaries from pcaps using Wireshark.
4th Circuit Ruling on Illegal e-Discovery Adds Teeth to Federal Anti-Hacker Email Privacy Law
The Fourth Circuit Court of Appeals has strengthened federal anti-hacker email privacy law by allowing a civil suit for punitive damages alone, even when there are no actual damages.
Windows FE has been gaining a bit of attention lately across the forensic blog-o-sphere. My interest primarily in Windows PE, as well a secondary interest in Windows forensics (as applied to sysadmin tasks) got me digging for more details on the rare object. A recurring question has been, is Windows FE forensically sound.