Collection of Evidence from the Internet, Part 2

By Todd Shipley

The question for digital forensic examiners is not only how to collect and document information from the cloud, but also whether the same acquisition and documentation methodology used for internet evidence can be used in the collection, preservation, and presentation of cloud-based evidence.

read more

White House Finds 22 Million Bush-era E-mails

The case of the missing Bush-era e-mails has finally been solved. The White House and two nonprofit groups announced a settlement Monday in a lawsuit over 22 million e-mails that were missing during the Bush administration because of poor labeling and other technical problems.

Fierce Government IT

Helping First Responders Investigate Electronic Crime Scenes

"Electronic Crime Scene Investigation: A Guide for First Responders, Second Edition" is designed to assist state and local law enforcement and others who may be responsible for preserving an electronic crime scene and for recognizing, collecting, and safeguarding digital evidence.

read more

Hackers Declare War on Microsoft's COFEE

Hackers have released software they say sabotages COFEE, Microsoft’s suite of forensics utilities for law enforcement. Decaf is a light-weight application that monitors Windows systems for the presence of COFEE and automatically executes a variety of countermeasures.

the register

Feds Go Global To Fight Cybercriminals Overseas

Concerned about the rise of sophisticated computer attacks from abroad, the FBI and the U.S. Secret Service are beefing up their international cybercrime enforcement, sending agents overseas to specifically deal with digital perils.

the associated press

E-Discovery Case Analysis Shows No Tolerance for Failures

If there’s one thing companies should take away from the flock of decisions related to electronic discovery issues in 2009, it’s that they won’t get a pass from the courts for e-discovery failures.

compliance week

Researchers Find Missile Defense Data on Used Hard Drive

For the fourth straight year, researchers at the University of Glamorgan in Wales have turned up surprisingly sensitive data—including details of test-launch procedures for a U.S. defense missile—by buying secondhand PCs.

dark reading

Guidance Software Awards Scholarships to Wounded Warrior Project

Guidance Software has donated 20 scholarships to the Transition Training Academy, a program of the Wounded Warrior Project that helps severely injured service members. Each scholarship package includes an EnCase Annual Training Passport.

read more

HBGary to Provide Cybersecurity Services to U.S. Government Agencies

HBGary, Inc. announces the spin-off of its U.S. government cybersecurity services group. The new company, known as HBGary Federal, will focus on delivering malware analysis and incident response products and expert classified services to U.S. government agencies.

read more

Digital Forensics Research Challenge Results Released

The results and winners of the 2009 Digital Forensics Research (DFRWS2009) Challenge were announced at the 9th Annual DFRWS Conference. This challenge delved into gaming consoles from a forensic perspective, combining UNIX file system forensics, memory forensics, and network forensics.

read more

“CSI Effect” Hits Digital Forensics

Ten years after tapping the burgeoning field of criminal forensics to create the popular TV show "CSI," Anthony Zuiker has set his sights on the world of cyber crime. The aptly named "Cyber Crimes" has been given a script plus penalty commitment by CBS.

variety

Forensic Cop Journal 2(1): Ubuntu Forensics

By Muhammad Nuh Al-Azhar

Forensic analysts should be well versed on the use of Ubuntu forensic applications as well as MS Windows’s applications. Then they will have many more tools at their disposal. When one tool does not give satisfactory results, they should be able to use other tools to yield the best results.

forensic cop

Proving Conspiracies with Electronically Stored Information

By Joshua Gilliland

Civil discovery and criminal prosecutions will continue to find text messages, e-mails, or social networking status messages as the smoking gun evidence. Lawyers must consider the broader scope of discovery that includes these highly transitory forms of electronically stored information.

bow tie law’s blog