IoT device forensics is a difficult problem given that manufactured IoT devices are not standardized, many store little to n…

Redundant capacity in filesystem timestamps is recently proposed in the literature as an effective means for information hid…

An international team of forensics experts helped create the SANS Investigative Forensic Toolkit (SIFT) Workstation and made…

This work explores the development of MemTri. A memory forensics triage tool that can assess the likelihood of criminal acti…

SANS instructors Heather Mahalik and Domenica “Lee” Crognale discuss iOS 11 messages and the differences they ha…

Wiley has announced a new book by Nick Furneaux – “Cryptocurrency Forensics”. The book is expected to be p…

Cindy Murphy from Gillware has published a very interesting post on how to reset the backup password in iOS 11. Here is an e…

Richard Davis continues his “Introduction to Windows Forensics” series. This video introduces the ubiquitous LNK…

We are not sure about your labs, but our receives more and more Macs for forensic examination every month. And, of course, s…

Sysinternals Autoruns is a great utility for defenders to discover and disable malware and adversaries’ persistence po…