Vendor Transparency, Mobile Device Extractions, & Brigs Learns the Difference Between Validation and Verification

Digital Forensics Now

#Tech #Heather Charpentier & Alexis "Brigs" Brignoni #Alexis "Brigs" Brignoni #Heather Charpentier #Digital Forensics #Mobile Forensics #DFIR #Computer Forensics

5:58

In 1966, two Brazilian men were found dead on Vintém Hill under bizarre circumstances that continue to perplex investigators and conspiracy theorists alike. Lying side by side, their bodies were discovered wearing matching lead masks—shields with no eyeholes—alongside cryptic notes. Were they victims of a cult ritual, a failed experiment, or something even more otherworldly? See Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/privacy#do-not-sell-my-info .…

for ca. et år siden 1:03:46

MP3•Episode hjem

Send us a text

We are back with a mind-boggling conversation about our experiences, and the ever-evolving face of digital forensics. We're going to share some personal anecdotes, enlighten you about the changing UNIX epoch timestamp, and even discuss how we cope with the advancing age in this fast-paced world.
In the digital world, knowledge is power. We will reveal an amazing cheat sheet from Cellebrite that will simplify your understanding of extractions and the data that they yield. We’ll also delve into the concept of tool transparency, highlighting the pros and cons that come with it. We’ll help you understand why it's crucial to be informed about known bugs in a tool, and navigate the complex process of bug reporting. We’re going to discuss why it's essential to have multiple tools in your arsenal for data validation, and how manual validation is a must when it relates to key evidence.
As we wrap up, we'll talk about the implementation of ALEAPP and iLEAPP in Paraben and its capabilities to choose artifacts to report on. To add some levity, we'll also share a humorous meme that perfectly captures the essence of the repercussions of failing to validate your digital data. So, prepare to embark on a journey that’s bound to make you rethink everything you know about data extraction and tooling analysis.
Notes-
Scholarship Reminders
-https://www.iacis.com/will-docken-scholarship/
-https://www.iacis.com/womens-scholarship/
-https://www.magnetforensics.com/blog/2023-magnet-forensics-scholarship-program-apply-today/
Cellebrite Data Extraction CheatSheet
-https://www.linkedin.com/posts/heather-mahalik-cellebrite_data-extraction-cheatsheet-activity-7125138491805462528-l5-5/
-https://cellebrite.com/en/episode-23-i-beg-to-dfir-data-extractions-explained-ffs-afu-bfu-advanced-logical-digital-forensics-webinar/
Paraben
-https://paraben.com

Kapitler

1. Vendor Transparency, Mobile Device Extractions, & Brigs Learns the Difference Between Validation and Verification (00:00:00)

2. Work Updates, Learning Python, and Scholarships (00:00:09)

3. Tool Transparency and Data Extraction (00:14:31)

4. Transparency and Issues in Tooling Analysis (00:21:49)

5. Using Multiple Tools for Data Validation (00:35:22)

6. Data Extraction and Reporting in Paraben (00:41:57)

7. MEME of the Week (00:55:10)

32 episoder

Vendor Transparency, Mobile Device Extractions, & Brigs Learns the Difference Between Validation and Verification

Digital Forensics Now

published for ca. et år siden

Del

MP3•Episode hjem

Send us a text

Kapitler

1. Vendor Transparency, Mobile Device Extractions, & Brigs Learns the Difference Between Validation and Verification (00:00:00)

2. Work Updates, Learning Python, and Scholarships (00:00:09)

3. Tool Transparency and Data Extraction (00:14:31)

4. Transparency and Issues in Tooling Analysis (00:21:49)

5. Using Multiple Tools for Data Validation (00:35:22)

6. Data Extraction and Reporting in Paraben (00:41:57)

7. MEME of the Week (00:55:10)

32 episoder

#Tech #Heather Charpentier & Alexis "Brigs" Brignoni #Alexis "Brigs" Brignoni #Heather Charpentier #Digital Forensics #Mobile Forensics #DFIR #Computer Forensics

Alle episoder

1
The Iceberg of Digital Evidence: What AI Can't See 1:06:51

for 29 dage siden1:06:51

1:06:51

Send us a text The boundary between tool-dependent analysis and true forensic expertise grows increasingly blurred as AI enters the digital forensics landscape. Alexis Brignoni and Heather Charpentier reunite after a month-long hiatus to sound the alarm on a concerning trend: the integration of generative AI into forensic tools without adequate safeguards for verification and validation. Drawing from Stacey Eldridge's firsthand experience, they reveal how AI outputs can be dangerously inconsistent, potentially creating false positives (or missing critical evidence) while providing no reduction in examination time if proper verification procedures are followed. This presents investigators with a troubling choice: trust AI results and save time but risk severe legal and professional consequences, or verify everything and negate the promised efficiency benefits. The hosts warn that as AI becomes ubiquitous in forensic tools, it dramatically expands the attack surface for challenging evidence in court—especially when there's no traceability of AI prompts, responses, or error rates. Beyond the AI discussion, the episode delivers practical insights for investigators, including an in-depth look at the Android gallery trash functionality. When users delete photos, these files remain in a dedicated trash directory for 30 days with their original paths and deletion timestamps fully preserved in the local DB database—a forensic goldmine for cases where suspects attempt to eliminate evidence shortly before investigators arrive. Other highlights include recent updates to the Unfurl tool for URL analysis, Parse SMS for recovering edited and unsent iOS messages, and Josh Hickman's research on Apple CarPlay forensics. Whether you're investigating distracted driving cases, analyzing group calls on iOS, or simply trying to navigate the increasingly complex digital evidence landscape, this episode offers both cautionary wisdom and practical techniques to enhance your forensic capabilities. Join the conversation as we explore what it truly means to be a digital forensic expert in an age of increasing automation. Ready to strengthen your digital investigation skills? Subscribe now for more insights from the front lines of digital forensics. Notes: Magnet Virtual Summit Presentations https://www.magnetforensics.com/magnet-virtual-summit-2025-replays/ https://www.stark4n6.com/2025/03/magnet-virtual-summit-2025-ctf-android.html parse_smsdb https://www.linkedin.com/posts/alberthui_ios-16-allows-for-imessagesmsmmsrcs-message-activity-7279586088988413952-xHWl https://github.com/h4x0r/parse_sms.db/tree/main Are you a DF/IR Expert Witness or Just a Useful Pawn? https://www.linkedin.com/posts/dfir-training_a-pawn-moves-where-its-told-a-dfir-expert-activity-7292981112463572992-c3wd/ Unfurl https://dfir.blog/unfurl-parses-obfuscated-ip-addresses/ https://github.com/obsidianforensics/unfurl AI to Summarize Chat Logs and Audio from Seized Mobile Phones https://www.404media.co/cellebrite-is-using-ai-to-summarize-chat-logs-and-audio-from-seized-mobile-phones/ Ridin' With Apple CarPlay 2 https://thebinaryhick.blog/2025/02/19/ridin-with-apple-carplay-2/ Hello Who is on the Line? https://metadataperspective.com/2025/02/05/hello-who-is-on-the-line/…

1
Mind Matters: Navigating DFIR with Balance 1:03:25

for 10 weeks siden1:03:25

1:03:25

Send us a text Get ready for a hands-on look at digital forensics and the challenges professionals tackle every day. We share a story about forensic guessing that highlights the importance of testing assumptions and following the evidence to avoid errors. The discussion emphasizes how staying grounded in facts can prevent investigations from going off track. We also highlight advancements in forensic tools and training. Learn about tools like Belkasoft, the UFADE tool for iOS device extraction, and SQBite for SQLite database analysis. These tools are improving efficiency and accessibility in the field. But it’s not all about the tech. We address the important topic of mental health in digital forensics. We discuss the pressures of the job, strategies for managing stress, and the importance of supporting one another. Personal experiences and practical tips highlight the need to prioritize mental well-being in this demanding field. This episode provides valuable information on tools, investigative approaches, and mental health strategies for forensic professionals. Notes: Belkasoft Windows Forensics Course https://belkasoft.com/windows-forensics-training Updates to UFADE https://github.com/prosch88/UFADE/releases The Duck Hunter's Blog https://digital4n6withdamien.blogspot.com/2025/01/the-duck-hunters-guide-blog-1.html https://digital4n6withdamien.blogspot.com/2025/01/the-duck-hunters-guide-blog-2.html https://digital4n6withdamien.blogspot.com/2025/01/the-duck-hunters-guide-blog-3.html SQBite https://digital4n6withdamien.blogspot.com/2025/01/introducing-sqbite-alpha-python-tool.html https://github.com/SpyderForensics/SQLite_Forensics/tree/main/SQBite Mental Health in DFIR https://thebinaryhick.blog/2019/06/21/mental-health-in-dfir-its-kind-of-a-big-deal/ https://www.forensicfocus.com/podcast/the-impact-of-traumatic-material-on-dfir-well-being/ https://www.forensicfocus.com/news/dfir-and-mental-health-are-we-doing-enough-to-protect-investigators/ https://www.sciencedirect.com/science/article/pii/S2666281721000251 https://belkasoft.com/preventing-burnout-in-digital-forensics https://www.magnetforensics.com/resources/taking-care-of-mental-health-during-digital-forensics-investigations/ https://www.harmlessthepodcast.com/ https://www.shiftwellness.org/about-us https://www.nyleap.org/ What's New with the LEAPPS https://github.com/abrignoni…

1
New Year, New Discoveries: Diving into Digital Forensics! 1:16:29

for 13 weeks siden1:16:29

1:16:29

Send us a text Kick off your new year with some forensic fun as we recount our holiday escapades and dive into the latest in digital forensics! Ever wondered how RAM dumps from Android devices can reveal crucial data? We spotlight MSAB's innovative RAMalyzer tool and their new blog series covering RAM from mobile devices. Discover how the digital forensics community is collaborating to propel the field forward, as we share insights from the DF Pulse 2024 Digital Forensic Practitioner Survey and the delicate dance between competition and cooperation. Standardization is the name of the game, and we're exploring how the field of digital forensics can benefit from it. Updates to Magnet Axiom's date range capabilities showcase the ceaseless evolution of digital forensics tools. Journey with us as we tackle the intricacies of Bluetooth tracker detection, all while considering the dual nature of technology and the significance of using it responsibly. From exploring Richard Davis's work with 13 Cubed to discussing Yogesh Khatri's contribution to analyzing the USN Journal, we shine a light on the vital role of principles in our field. With warm wishes for the new year, we invite you to stay tuned for more episodes brimming with insights and camaraderie. Notes: MSAB RAMalyzer series! https://msab.com/resources/blog/ Paraben Forensic Innovation Conference https://link.reachpenguin.com/widget/form/99kVMTgaA0mbpZvYLTjG Tip Tuesday: Troubleshooting in PA https://www.youtube.com/watch?v=eSNovfdwucw&list=PLwmKlEiYNUYte-pnlbw45YKpPB7K8xCgC&index=1 DFPulse: The 2024 digital forensic practitioner survey https://www.sciencedirect.com/science/article/pii/S2666281724001719 Magnet Axiom Cyber 8.7: Acquire iCloud backups from ADP-enabled accounts, and more! https://www.magnetforensics.com/blog/magnet-axiom-cyber-8-7-icloud-adp-and-more/ Android Will Let You Find Unknown Bluetooth Trackers Instead of Just Warning You About Them https://www.engadget.com/mobile/smartphones/android-will-let-you-find-unknown-bluetooth-trackers-instead-of-just-warning-you-about-them-204707655.html Be Kind, Rewind... The USN Journal https://youtu.be/GDc8TbWiQio?feature=shared Apple Photos phones home on iOS 18 and macOS 15 https://lapcatsoftware.com/articles/2024/12/3.html SWGDE Considerations for Required Minimization of Digital Evidence Seizure swgde.org/16-f-002/…

1
The Gift of Expertise: Why Forensics Matter in the Courtroom 1:19:31

for 16 weeks siden1:19:31

1:19:31

Send us a text Join us for a holiday-themed episode of Digital Forensics Now , where we blend expert insights with personal stories from the field of digital forensics. This episode delves into cutting-edge tools and techniques for digital forensics. Explore insights from Arsenal on advanced methods for analyzing swap space and memory files. We also share experiences with the Samsung Secure Health Data Parser, highlighting the challenges of decrypting health databases and the critical role of UFED in overcoming them. Don’t miss an in-depth look at the remarkable features of ArtEX, showcasing its value to examiners. Additionally, we introduce the LEAPPS Artifact Viewer App (LAVA), a groundbreaking tool unveiled at the Cyber Social Hub conference. We discuss the vital role of forensic experts in legal proceedings, from the importance of meticulous validation to the risks of mishandling evidence. Real-world cases and a controversial court rulings that highlight why expert testimony remains essential in interpreting digital artifacts. We close with gratitude to our listeners and warm holiday wishes. Stay tuned on social media for updates on our next live session after the holidays. Notes: Working with 010 Hex-Editor https://www.youtube.com/playlist?list=PLCS2zI95IiNwheFCTaUEytA1GT0mNOOdn Arsenal Releases a New Tool! https://arsenalrecon.com/additional-products Samsung Secure Health Data Parser - A Forensic Tool for Parsing & Analyzing Samsung Secure Health Databases https://github.com/breakpointforensics/Samsung-Secure-Health-Data-Parser-/tree/main ArtEx Artifact Examiner https://www.doubleblak.com/app.php?id=ArtEx2 Why the Manual Preview/Screenshots May Not Hold Up in Court https://www.forbes.com/sites/larsdaniel/2024/11/13/think-that-screenshot-is-proof-heres-why-it-might-not-hold-up-in-court/ https://www.forbes.com/sites/larsdaniel/2024/12/06/smartphone-forensics-and-fake-texts-how-are-courts-responding/ What's New with the LEAPPS!? Google Keep Notes https://charpy4n6.blogspot.com/2024/12/google-keep-notes.html Signup for Updates! leapps.org…

1
BFU Data, Forensic Tools, and the Future of Digital Investigations 1:17:52

for 19 weeks siden1:17:52

1:17:52

Send us a text The latest episode of Digital Forensics Now kicks off with lighthearted banter about Heather's newfound fame in commercials, bringing a fun and relatable start to a tech-heavy discussion. Following the laughs, the conversation shifts to an invigorating recap of Alexis' recent experience at SANS DFIRCON, featuring interactions with digital forensics luminaries like Brian Maloney and Ian Whiffin. Ian's ArtEx tool, which cleverly maps locations for forensic investigations, also takes center stage as a highlight of the conference. The episode weaves in personal reflections, including a scenic family train ride from Orlando to Miami and the implementation of a Python artifact exercise during a teaching session. The journey continues with a vibrant detour to the Tanganyika Wildlife Park in Kansas, where the usual birthday horseback riding tradition was replaced with unforgettable encounters like swimming with penguins, feeding giraffes, and snapping selfies with lemurs. These charming moments with nature set a refreshing tone before diving back into the tech world. In the realm of digital forensics, the episode explores reverse engineering iOS 18, discusses the brief availability of BitLocker support in FTK Imager, and examines the evolving landscape of BFU (Before First Unlock) data extraction in law enforcement. The hosts delve deep into the complexities of digital forensics tools, translating technical data structures into accessible insights while emphasizing the importance of a strong digital evidence strategy. Topics include advancements in the LEAPP Parsers, the innovative Lava Viewer, and the latest developments in Blue Sky data structures, offering a comprehensive look at the tools shaping the field. The episode wraps up with an open invitation for listeners to connect on social platforms, share their thoughts, and showcase innovative projects within the community, fostering a collaborative and forward-thinking space for digital forensics enthusiasts. Notes iOS Devices Rebooting Continuedhttps://naehrdine.blogspot.com/2024/11/reverse-engineering-ios-18-inactivity.html Samsung Secure Health Data Parser https://breakpointforensics.com/2024/11/06/samsung-secure-health-data-parser-a-forensic-tool-for-parsing-analyzing-samsung-secure-health-databases/ https://github.com/breakpointforensics/Samsung-Secure-Health-Data-Parser-/tree/main Mobile Forensics Data Structures: Extracting and Analyzing Data with Free Toolshttps://www.hexordia.com/blog/mobile-forensics-data-structures GAMEPLANS: A template for robust digital evidence strategy developmenthttps://onlinelibrary.wiley.com/doi/10.1111/1556-4029.15655Digital Evidence Enhancing public safety using digital investigative technologieshttps://majorcitieschiefs.com/wp-content/uploads/2024/10/MCCA-Digital-Evidence-White-Paper-_-Oct-2024.pdf Importance of BFU Partial Filesystem Extractions!https://www.linkedin.com/posts/1carl-lawrence_dfir-polcing-digitalforensics-activity-7264179600631468034-FHGh Sumuri Gives Back 2024 https://sumuri.com/sumuri-gives-back-2024/…

1
iOS 18’s Inactivity Reboots Explained: AFU to BFU Transitions with Chris Vance from Magnet Forensics 1:02:32

for 20 weeks siden1:02:32

1:02:32

Send us a text Join us on the Digital Forensics Now podcast as we explore the details of the iOS 18 inactivity reboot issue with mobile forensics expert Christopher Vance from Magnet Forensics. Chris traces the origins of this challenge back to iOS 17 and explains how unified logs play a key role in diagnosing these system memory resets. This episode is packed with valuable insights for anyone interested in the inner workings of iOS devices and the unique considerations they present in digital forensics. We also discuss device security and data preservation, focusing on iOS devices. Examining the balance between law enforcement’s need for data access and Apple’s privacy measures, we highlight the importance of extracting the data from devices quickly to prevent data loss. Our conversation covers the legal complexities, jurisdictional nuances, and the demand for data preservation tools to address these challenges effectively. We explore recent developments in mobile technology, specifically Android 15's "Private Space" feature and how it will effect the digital forensic community workflow. With insights from industry experts, this episode is full of essential updates tailored for digital forensics professionals looking to stay current. Notes: iOS Devices Rebooting https://www.magnetforensics.com/blog/understanding-the-security-impacts-of-ios-18s-inactivity-reboot/ 5 iOS forensics evidence sources to capture before they expire https://www.magnetforensics.com/blog/ios-forensics-evidence-sources-to-capture-before-they-expire Mac and iOS Forensic Analysis and Incident Response Poster https://www.sans.org/posters/macos-ios-forensic-analysis/…

1
AI in Court: Testimony or Tech-tastrophe? 1:14:36

for 24 weeks siden1:14:36

1:14:36

Send us a text Could AI in forensic analysis be more of a liability than an asset? Join us as we explore this pressing concern. We kick off this episode with an important update for those dealing with Android extractions. Recent changes to the Android OS and Google Play Store might be causing the Keystore (secrets.json) file to either miss data or not be extracted at all. This brings attention to the vital role decryption keys play in accessing data from mobile devices. Next, we dive into advancements in forensic tools like MSAB’s new RAM analyzer for XRY Pro users. For iOS investigators, if you’re working with Cache.sqlite data, you’ll want to check out iCatch, a tool designed to map the data efficiently and streamline your workflow. Shifting to the role of AI, we examine a recent legal case that highlights the dangers of relying on AI-generated results without proper verification. Accuracy and repeatability are key, and our discussion focuses on the ethical implications of using AI in forensic investigations. We emphasize the importance of thoroughly validating AI tools to maintain trust in the legal process. Notes: Updated Telegram Policy https://www.linkedin.com/posts/luca-cadonici-41299b4b_policy-telegram-cybersecurity-activity-7244258209979334656-AxPlhttps://telegram.org/privacy#8-3-law-enforcement-authorities MSAB RAMalyzer https://www.youtube.com/watch?v=1SEgSYSF03A Expert witness used Copilot to make up fake damages, irking judge https://arstechnica.com/tech-policy/2024/10/judge-confronts-expert-witness-who-used-copilot-to-fake-expertise/https://law.justia.com/cases/new-york/other-courts/2024/2024-ny-slip-op-24258.html iCATCH https://github.com/AXYS-Cyber/iCATCH…

1
Awareness Unlocks Discovery: Knowing It Exists is the First Step to Finding It 1:05:28

for 26 weeks siden1:05:28

1:05:28

Send us a text Join us as we discuss the latest blogs and training opportunities available to keep you at the forefront of digital forensics. We’ll then dive into the release of iOS 18 and its impact on digital forensic investigations. Beyond tools and gadgets, we'll explore the shift towards cloud-based evidence storage, weighing its benefits and security challenges against traditional air-gapped networks. Whether you're a seasoned professional or just beginning your journey, this episode offers a mix of education, entertainment, and a sense of community, all with a dash of geek culture fun. Notes: -Triple Trouble. iOS 16, Android 14, and iOS 17 Images Now Available! https://thebinaryhick.blog/2024/09/14/triple-trouble-ios-16-android-14-and-ios-17-images-now-available/ -A First Look at iOS 18 Forensics https://blog.digital-forensics.it/2024/09/a-first-look-at-ios-18.htmlhttps://www.magnetforensics.com/blog/a-look-into-ios-18s-changes/ -New iOS Feature - Brian Krebs Linkedin Post https://support.apple.com/guide/iphone/request-give-remote-control-a-facetime-call-iph5d70f34a3/ios -macOS 15 (Sequoia): What Forensic Examiners Need to Know https://www.linkedin.com/pulse/macos-15-sequoia-what-forensic-examiners-need-know-sumuriforensics-ohbrc/ -25th Anniversary of Paraben https://l.paraben.com/25-year-anniversary-3005 -Oxygen 2024 International User Summit https://oxygenforensics.com/en/user-summit-2024/ -When is an app not an app? Investigating WebAPKs on Android https://www.cclsolutionsgroup.com/post/when-is-an-app-not-an-app-investigating-webapks-on-android -mr. eerie Blog https://mreerie.com/2024/09/30/exploring-ufade-to-extract-data-from-ios-devices/ -Learn With Hexordia Launch https://learn.hexordia.com -Noel Lowdon-Vehicle Systems Forensics https://www.linkedin.com/in/noel-lowdon-74685769/ -Not Scary Binary https://us02web.zoom.us/webinar/register/WN_8G0VMawERVO-kpaDJbE2Ww#/registration -Marco Neumann added Withings HealthMate on iOS (iLEAPP) https://bebinary4n6.blogspot.com/2024/09/withings-healthmate-on-ios.html…

1
Balancing Act: Trials, Training, and the Future of Digital Forensics 1:06:33

for 29 weeks siden1:06:33

1:06:33

Send us a text Recognizing excellence is key in our community, and we spotlight the SANS Difference Maker Awards and Cellebrite Summit Digital Justice Awards. Discover why it’s crucial to nominate your peers and learn about the newly opened registration for IACIS 2025 training classes, featuring must-attend courses like Advanced Mobile Device Forensics. While highlighting a recent article by Brett Shavers, we stress the significance of continuous education and community acknowledgment in helping digital forensics professionals grow and excel. Our conversation delves into the technical challenges of iOS Telegram data analysis and the development of tools like Kathryn Hedley's Parse USBs script. We shed light on the importance of peer reviews and cognitive bias in forensics. This episode is a deep dive into the intricacies of digital forensics, education, and the community that drives it forward. Notes: SANS Difference Maker Awards https://www.sans.org/about/awards/difference-makers/ Cellebrite Summit Digital Justice awards https://cellebrite.com/en/c2c-summit-digital-justice-awards/ IACIS 2025 Training https://iacis.com/training/ Belkasoft - iOS Telegram Acquisition and Database Analysis https://belkasoft.com/ios-telegram-forensics-acquisition-and-database-analysis Kathryn Hedley parseusbs script https://www.khyrenz.com/post/automated-usb-artefact-parsing-from-the-registryhttps://github.com/khyrenz/parseusbs Cracking OneDrives Personal Vault -Brian Maloney https://malwaremaloney.blogspot.com/2024/09/cracking-onedrives-personal-vault.html https://github.com/Beercow/Personal-Vault-BEK Brett Shavers New Article - Today, today I rant https://www.linkedin.com/pulse/today-i-rant-dfir-training-brett-shavers--pij4c/ Lionel Notari Logs of the Week https://www.ios-unifiedlogs.com/unifiedlogoftheweek…

1
AI as a Report Writing Tool: Accuracy Enhancing or Recollection Poisoning? 1:07:06

for 31 weeks siden1:07:06

1:07:06

Send us a text What's the real impact of AI on law enforcement documentation? Can digital forensics tools truly revolutionize our investigative processes? These are just some of the provocative questions we tackle in our season two premiere of Digital Forensics Now! Join us as we celebrate our one-year anniversary with reflections on the past year, exciting updates, and plans for the future. The episode takes a deep dive into the ethical and practical implications of AI in law enforcement, sparked by a recent AP News article on police officers using AI chatbots for writing crime reports. We express our skepticism about AI's accuracy and discuss the vital need for human oversight. Examining AI’s influence on officers' recollection of events, this episode scrutinizes the potential pitfalls and ethical concerns associated with AI in policing. We also humorously critique some AI-generated descriptions of our podcast, shedding light on AI's current limitations and biases. Don't forget to vote for your favorite difference makers with the SANS Difference Maker Awards! In the latter part of the show, we shine a spotlight on Recuperabit, a forensic file system reconstruction tool, and Lionel Notari's invaluable contributions on iOS log files. We tackle the challenges of modifying third-party tools and discuss the broader ethical concerns of reverse engineering. As we wrap up, we celebrate our anniversary by announcing the winners of our prize draw and featuring the "Meme of the Week," which humorously highlights the financial struggles in our field. Tune in for an informative and engaging episode! Notes- Local Storage and Session Storage in Mozilla FireFox Part 1 https://www.cclsolutionsgroup.com/post/local-storage-and-session-storage-in-mozilla-firefox-part-1 SANS Difference Maker Awards https://www.sans.org/about/awards/difference-makers/ Police officers are starting to use AI chatbots to write crime reports. Will they hold up in court? https://apnews.com/article/ai-writes-police-reports-axon-body-cameras-chatgpt-a24d1502b53faae4be0dac069243f418 Magnet Forensics acquires Medex Forensics https://www.magnetforensics.com/news/magnet-forensics-acquires-medex-forensics-strengthening-video-evidence-integrity-with-detection-of-deepfakes-and-generative-ai/ RecuperaBit Forensic File System Reconstruction https://www.forensicfocus.com/interviews/andrea-lazzarotto-digital-forensics-consultant-and-developer/https://github.com/Lazza/RecuperaBit The Logs of the Week https://www.ios-unifiedlogs.com/unifiedlogoftheweek…

1
Bird Cameras and Forensic Insights from New Zealand 1:13:37

for 34 weeks siden1:13:37

1:13:37

Send us a text (THIS IS WHAT AN AI GENERATED DESCRIPTION WITH NO HUMAN CORRECTIONS WILL PROVIDE FOR YOU! SO NATURALLY WE HAD TO KEEP IT HAHA!) What happens when a digital forensics expert sets up a podcast studio in a cupboard under the stairs and a co-host becomes a modern-day Snow White with her Bird Buddy camera? You get a lively and engaging episode of the Digital Forensics Now podcast! Alexis Brignoni, aka Briggs, and Heather Charpentier kick off this special episode with humor and camaraderie, sharing personal anecdotes and giving shout outs to their devoted listeners like Adam and Kevin. Plus, we nod to fellow podcaster Justin Tolman for his enlightening episodes on forensic technology, including a riveting discussion on AI and legal standards with Brandon Epstein. Ever wondered how driving on the opposite side of the road or discovering local flavors like Vegemite could become part of a professional journey? This episode takes you on an entertaining trip to New Zealand, where Alexis recounts his experiences teaching at a New Zealand Customs event alongside experts like Jung Son and Mario Merendon. From navigating tiny light switches to marveling at Auckland’s architectural wonders, this chapter is filled with both professional insights and delightful cultural encounters. The rooftop bar with waist-high glass bumps offering views into the train station below is a highlight not to be missed! For our tech-savvy listeners, we dive deep into the world of digital forensics tools and training. We discuss the significance of volunteering for IACIS, troubleshoot Magnet Axiom software, and outline upcoming training events like the SANS Community Learning Day in Miami. We also explore the practicalities of running Python scripts, showcasing a new tool called Mister Skinnylegs, caution against over-reliance on AI, and stress the importance of fundamental knowledge in digital forensics. From iOS tool updates and Metadata Forensics to sourcing forensic-related blogs, this episode is packed with valuable insights to enhance your forensic expertise. Notes: DFIRCON xLEAPP https://www.sans.org/mlp/dfircon-miami-agenda/ CCL Solutions Group - Mister Skinnylegs https://github.com/cclgroupltd/mister-skinnylegs iOS 17- The “Forever” Setting That Isn’t… Or Is It? https://smarterforensics.com/2024/08/ios-17-the-forever-setting-that-isnt-or-is-it/ Identity Lookup Service https://djangofaiola.blogspot.com/2024/08/identity-lookup-service.html…

1
Due Diligence, Password Cracking & New Tool Features 1:23:26

for 38 weeks siden1:23:26

1:23:26

Send us a text Welcome back to another episode of the Digital Forensics Now podcast! In this episode, we explore the critical need for continuous learning in the field, discuss fascinating forensic tools, showcase UFADE with its new chat capture feature, and engage in a spirited debate on the value of certifications. Get ready to expand your knowledge and stay at the forefront of this ever-evolving industry. We begin by discussing the intricacies of unconscious and conscious incompetence as outlined in Brett Shavers new article. The episode continues with a detailed demonstration of UFADE, created by Christian Peter highlighting its user-friendly interface and the new chat capture feature. The hosts walk you through the tool's capabilities, showcasing its accessibility and usefulness in digital forensics investigations. From breaking Windows logon passwords using a Raspberry Pi Zero W to exploring the distinction between exploratory and explanatory data analysis, this segment offers a wealth of knowledge and practical insights. We also touch on the value of certifications, sparking a lively debate that challenges conventional wisdom and invites listeners to question the true measure of expertise in the tech industry. Get ready to be engaged in this thought-provoking episode. Notes- DFIR Competence: Are you Truly Skilled or Just Fooling Yourself? https://www.dfir.training/blog/dfir-competence-are-you-truly-skilled-or-just-fooling-yourself Oxygen Forensics Call for Speakers at the 2024 International User Summit https://oxygenforensics.com/en/call-for-speakers-user-summit/ UFADE Updates https://github.com/prosch88/UFADE P4WNP1 Build https://lush-seeder-8ab.notion.site/P4WNP1-Build-54ffcdbe7cdf4e74b47861e9bd80f857 SANS Webcast Series https://www.sans.org/webcasts/demystifying-data-conversion-binary-hexadecimal-decimal-ascii/ Bitlocker on by Default Windows 11 https://www.tomshardware.com/software/windows/windows-11-24h2-will-enable-bitlocker-encryption-for-everyone-happens-on-both-clean-installs-and-reinstalls ChatGPT https://www.sciencedirect.com/science/article/pii/S2666281724001252?dgcid=author…

1
Microsoft recall of Recall & all of the latest Digital Forensic News! 1:07:30

for 42 weeks siden1:07:30

1:07:30

Send us a text Join us as we recount our recent travels to Argentina and the Techno Security & Digital Forensics conference. We'll share the highlights of our trips before diving into the core content. What could possibly go wrong with a feature designed for user convenience? We'll scrutinize Microsoft's controversial "Recall" feature, exploring its significant privacy concerns and implications for digital forensics. From unencrypted data to automatic opt-ins, we speculate on the potential user backlash. We'll also dive into the latest tech updates, including CCL Solutions Group's enhancements to the Rabbit Hole tool and how these advancements can revolutionize data analysis processes. Discover the capabilities of VFC from MD5 and the latest tools for examining data from platforms like Snapchat and Facebook. We'll introduce new and updated blogs, innovative Python scripts, and the latest additions to the LEAPPS in this packed episode. Stick around for an insightful discussion and a sneak peek at what's coming in future episodes. Notes- Rabbit Hole Updates and SQLite Blog/Cheatsheet https://vimeo.com/948752153 https://www.cclsolutionsgroup.com/post/time-travelling-with-sqlite-journals-and-wal https://vimeo.com/953570512 https://cdn.prod.website-files.com/5f02f2c93eab87a6ea84e2f3/665ed5e6ec5ef877d9d74dd2_sqlite-journal-cheatsheet.pdf Copilot+ Recall disaster & Forensic Applications of Microsoft Recall https://doublepulsar.com/recall-stealing-everything-youve-ever-typed-or-viewed-on-your-own-windows-pc-is-now-possible-da3e12e9465e https://cybercx.com.au/blog/forensic-applications-of-microsoft-recall/ Rising Star Jeremy McBroom https://yeahihaveaquestion.com/ Analysis of Browser Artefacts from File Sharing Services https://us5.campaign-archive.com/?u=a5a2a1131e612711f02b96e2c&id=9555c3f865 https://github.com/cclgroupltd/ccl_chromium_reader SQLite Freelist Page Checker https://github.com/SpyderForensics/SQLite_Forensics Forensics StartMe Page https://start.me/p/q6mw4Q/forensics?locale=en…

1
Android Security, Market Acquisitions, Research, Tools & More Tools! 1:23:13

for 46 weeks siden1:23:13

1:23:13

Send us a text Join us for an engaging session where we'll recap recent events and activities before diving into the latest research, cutting-edge tools, and exciting updates! Tune in as we explore groundbreaking research conducted by emerging stars in the DFIR community. We'll delve into the testing of data stored in iOS Unified Logs, focusing on driving and motion states—this is sure to be fascinating. Discover the newly documented multi-user/multi-account functionality, such as Samsung's Dual Messenger, uncovered by a newcomer to digital forensics. Stay informed about enhancements and new capabilities for tools like UFADE. We'll also ponder the implications of significant market acquisitions, such as Thoma Bravo's, and discuss their potential impact on the digital forensics field. Additionally, learn about Android's innovative anti-theft features designed to thwart device thieves, which will also have implications for forensic investigations. This episode is packed with insights you won't want to miss! Notes- iOS Unified Logs - Driving and Motion States https://www.ios-unifiedlogs.com/post/ios-unified-logs-driving Thoma Bravo Announces a Cash Offer to Acquire Cybersecurity Leader Darktrace https://www.thomabravo.com/press-releases/thoma-bravo-announces-a-cash-offer-to-acquire-cybersecurity-leader-darktrace Magnet One https://www.magnetforensics.com/products/magnet-one/ UFADE Updates https://github.com/prosch88/UFADE/ Android’s Theft Protection Features Keep Your Device and Data Safe https://blog.google/products/android/android-theft-protection/ CCL Updates https://github.com/cclgroupltd/ccl-segb Brian Hempsteads Work on the Session Application https://www.linkedin.com/posts/bhempstead_a-guide-for-session-app-sqlite-database-navigation-activity-7196877311659446272-zebu Phil Hagen YouTube Channel https://www.youtube.com/@PhilHagen VMware Fusion Pro: Now Available Free for Personal Use https://blogs.vmware.com/teamfusion/2024/05/fusion-pro-now-available-free-for-personal-use.html https://unexploredterritory.tech/074-newsflash-vmware-workstation-and-fusion-licensing-changes-did-i-hear-free/…

1
Live from IACIS with the Phone Wizard, Bill Aycock! 57:55

for 48 weeks siden57:55