DFI News logo

Your weekly news source for professionals working in digital forensics.

Image of a pencil eraser being applied to a hard disk platter
April 17, 2009

Product Focus

Let WetStone train you for the unexpected!

• Hacking Bootcamp

• Advanced Steganography

• Zombies and Botnets

• Rootkit Investigation

• Wireless Hacking

Come to one of our scheduled locations or let us bring our training lab to you!

1-877-WETSTONE X2
sales@wetstonetech.com

www.wetstonetech.com

Industry Calendar

To submit an event, please email editors@DFInews.com.

FEATURED EVENT

October 23-24, 2009

April 20-21, 2009

Legal IT

Montreal, Canada

www.legalit.ca

April 20-24, 2009

EDAS Bootcamp

Tampa, FL

www.gohtci.com

April 27-29, 2009

The Computer Forensics Show

Washington, DC

computerforensicshow.com

April 27-29, 2009

eDiscovery

San Francisco, CA

ediscoveryevent.com

May 5–7, 2009

Cell Phone Forensics

Pittsburgh, PA

bkforensics.com

May 17-20, 2009

CEIC 2009

Orlando, FL

www.ceicconference.com

May 17-21, 2009

CSI SX 2009

Las Vegas, NV

www.csisx.com

May 20-22, 2009

ADFSL Conference

Burlington, VT

digitalforensics-conference.org

May 22, 2009

SADFE

Oakland, CA

conf.ncku.edu.tw/sadfe/

May 26-30, 2009

Mobile Forensics World

Chicago, IL

mobileforensicsworld.com

May 31-June 3, 2009

Techno Security Conference

Myrtle Beach, SC

www.techsec.com

June 28 – July 3, 2009

FIRST

Kyoto Japan

www.first.org

July 7-9, 2009

Cell Phone Forensics II Washington, DC

h11-digital-forensics.com

July 12-14, 2009

20th Annual ACFE Fraud Conference & Exhibition

Las Vegas, NV

www.fraudconference.com

July 25–28, 2009

USA 2009 - Black Hat

Las Vegas, NV

www.blackhat.com

August 3-5, 2009

Computer Forensics Show

San Jose, CA

computerforensicshow.com

August 13-14, 2009

Third International Workshop on Computational Forensics

The Hague, The Netherlands

iwcf09.arsforensica.org

August 17–19, 2009

Digital Forensic Research Workshop

Montreal, Canada

www.dfrws.org

August 23-26, 2009

2009 HTCIA International Training Conference

Lake Tahoe, CA

www.htcia.org

Sep 30 - Oct 2, 2009

1st International ICST Conference on Digital Forensics & Cyber Crime

Albany, NY

www.d-forensics.org

October 23-24, 2009

A National Symposium on the Collection, Analysis and Legal Applications of Digital Evidence - The Cyril H. Wecht Institute of Forensic Science and Law

Pittsburgh, PA

www.forensics.duq.edu

October 26-28, 2009

2009 Techno Forensic Conference

Gaithersburg, MD

www.techsec.com

November 8-11, 2009

PFIC 2009

Park City, UT

www.pfic2009.com

Should Digital Forensic Examiners be Licensed PI’s?

The debate on private investigator licensing for digital forensic examiners is heating up, with various states falling on both sides of the issue. Experts are weighing in including a resolution from the American Bar Association asking government agencies to refrain from requiring licensing.

In the News

Deleted Data Drives New Data Breaches

According to a new report, cyber criminals are no longer attacking where the credit card files are, but where they once were. "Criminals are borrowing from digital forensics tools," Bryan Sartan, director of investigative response for Verizon Business Security Solutions told PC World. He said criminals are now able to read deleted transaction data from unallocated disk space.

The Cloud: Tomorrow's EDD Challenge

This article explores the potential e-discovery impact of cloud computing, and concludes that while some of its e-discovery aspects fall within the scope of existing precedent, cloud computing raises several new discovery questions that are not fully addressed by existing law.

Governor Signs Attorney General’s Digital Crime Lab Bill

Washington Attorney General Rob McKenna hailed the signing of a bill allowing his office, in concert with the Washington State Patrol, to lay the groundwork for the creation of a digital crime lab.

Internet Explorer 8’s “Porn Mode” Can Be Cracked

The use of privacy programs provides false comfort to those using them. As all computer forensic professionals know, just because something has been deleted, doesn’t necessarily mean that it is gone. In August 2008, Dutch computer forensics firm FoxIT reported that it reconstructed the browsing history, browser cache, and other information about an Internet Explorer 8 InPrivate session.

Cybercrime on the Rise

The Internet Crime Complaint Center’s (IC3) 2008 Internet Crime Report found a 33.1% increase in internet crime in 2008. The IC3 website received 275,284 complaint submissions in 2008, compared to 206,884 complaints in 2007.

Meanwhile, the FBI has now ranked cyber crime as the third-greatest threat to U.S. national security, after nuclear war and weapons of mass destruction.

Spies Compromised US Electric Grid

The Associated Press reported that spies have hacked into the U.S. electric grid leaving behind computer programs that would let them disrupt service, exposing potentially catastrophic vulnerabilities in key pieces of national infrastructure.

People & Business

Fields Data Recovery Expands Facilities in St. Louis

Fields Data Recovery (FDR), a global leader in digital forensics and data recovery, today announced its plans to double the number of technical staff, acquire new hardware recovery tools and take on new office space in St. Louis in order to greatly increase its capacity to deal with hard disk drive and RAID data recovery jobs.

Precision Discovery Further Boosts Electronic Discovery Capabilities with Addition of Seasoned Professionals

Curtis Browne and Michael Ross, well-respected electronic discovery experts, have joined Precision Discovery as Senior Directors. Browne and Ross both have more than two decades of information technology experience, including extensive backgrounds in e-discovery.

New EMC SourceOne Product Family Delivers New Solutions for Archiving, e-Discovery, and Compliance

EMC SourceOne Discovery Manager can quickly find, safely hold, efficiently cull, and defensibly produce archived e-mail. Discovery Manager is built around a legal matter or case metaphor and supports secure authorized investigator access, defensible collection results, and chain of custody.

E-Fense Incident Response and Computer Forensics Software Helix3 Now Available

Helix3 Pro, a bootable live CD allows you to boot into a customized Linux environment that includes customized Linux kernels, excellent hardware detection and includes many applications dedicated to Incident Response and Forensics. Helix3 has been modified very carefully to not touch the host computer in any way and it is forensically sound.

SIM Card Data Undelete

This freeware SIM card data salvage tool from Undelete is helpful for retrieving the data from mobile phones in forensic investigations as the application can easily be operated by non technical mobile users. The cell phone SIM card SMS recovery application provides full back up of a cell phone SIM card memory.

In the Blogs

Revocation of Consent to Seize Computer

This post is about what happens when consent to let police officers seize a laptop or desktop is revoked. Consent substitutes for a warrant because consent for police to search or seize is a waiver of the right to have them not do so, when that consent is withdrawn, what can you keep without obtaining a warrant?

Spinning the Spoliation Record (OR, Download MP3 Sanctions)

Online music downloads have caused litigation with the click of the mouse since the days of Napster in the 1990s. Arista Records LLC v. Usenet.com, Inc., 2009 U.S. Dist. LEXIS 5185 (S.D.N.Y. Jan. 26, 2009) continues the story of the music industry suing for copyright infringement.

Cell Phone Web Apps Cache More Data to the Device

Good news for those of us in the business of computer/mobile forensics, the latest cell phone web applications and trends cache (even more) data to the device. This will make the recovery of potentially important data/evidence easier, provided you have the proper training, tools, and technical knowledge.

5 Ways To Survive a Data Breach Investigation

When the digital forensics crew comes in to investigate a possible data breach, company execs often make matters worse by not being prepared. Here are five ways to keep it from happening to you.

More news and information available at
DFInews.com