The Digital Forensic Sub-Disciplines: Part 2

By John J. Barbara

Although very well intentioned at the time, the original recommendation of the ASCLD Digital and Multimedia Evidence Discipline name and its four sub-disciplines needs to be readdressed. The discipline should be renamed “Digital Forensics” and the current four sub-disciplines eliminated.

Read more

The Forensic Dossier® Data Capture Solution

Quickly capture multiple suspect hard drives at speeds approaching 7GB/min with Logicube’s Forensic Dossier®. The Dossier provides built-in support for SATA/IDE hard drives, flash media and RAID pair and optional support for both SCSI and SAS drives. This advanced solution captures a suspect drive to multiple DD image files and provides optional support for capture to E01 evidence file format. The Dossier provides 100% write-protection of source drives – use the Dossier as an external write-blocker for easy drive preview/image transfer.

www.logicubeforensics.com

Arsenal Consulting and American Investigative Services Form Strategic Alliance

Arsenal Consulting and American Investigative Services announce the official formation of a strategic business partnership. The alliance merges Arsenal's specialization in computer forensics with AIS's expertise in private investigations to provide clients with comprehensive investigative services.

Read more

Guidance Software Expands Worldwide Channel Program

Guidance Software Inc. announces a new channel expansion initiative designed to help information security, e-Discovery, and digital forensics-centric partners offer their customers products that augment existing security tools to better address the growing cybersecurity threat.

Read more

F-Response 3.09.06: Fear No Platform

Agile Risk Management LLC announces the release of F-Response 3.09.06. The most noticeable change to this new release is the ability to use F-Response Enterprise to directly deploy to remote potential F-Response targets via the GUI completely independent of platform.

Read more

Event Log Analysis

By Harlan Carvey

As we've seen before, event log records can be very useful...sorting them based on record number may show us that the system clock had been manipulated in some way.

Read more

Seeking Legal Ground in Unallocated Space

By Leonard Deutchman

The court in TR Investors LLC v. Genger ascribes to the defendant a duty to preserve artifacts found in unallocated space on hard disks. Federal Rule of Civil Procedure 37(e) states that a court may not impose sanctions for failing to provide electronically stored information lost as a result of routine operations.

Read more

What’s the Future of Computer Forensics?

By Steve Burgess

A student asked me an interesting question today regarding what I foresee in the field of computer forensics in the coming 5, 10, and 50 years. Here’s the question, and my answer.

Read more