The Digital Evidence Forensic Laws in Canada and USA: Theories and Practices
This book delivers an introduction to the topic of Digital Forensics, covering theoretical, practical and legal aspects with…
Copy locked files from a live system with RawCopy
RawCopy is a console application that copy files off NTFS volumes by using low level disk reading method. Here are some exam…
Facebook Forensics for Windows 10
In this article forensic artefacts of Windows 10 Facebook App are extracted from SQLite databases and their forensic importa…
Memory Forensics of Linux and Mac Systems
Here is Andrew Case’ presentation on memory forensics of Linux and Mac systems from Enfuse 2016. …
Practical OS X Malware Detection and Analysis
Here is Patrick Wardle’s presentation from RSA Conference USA 2016 on practical OS X malware detection and analysis. …
Using OS X FSEvents to Discover Deleted Malicious Artifacts
Here is an article by William Tan describing the usage of OS X FSEvents to discover deleted malicious artifacts. …
The DFIR Hierarchy of Needs & Critical Security Controls
We suggest starting 2017 from improving your organisation’s digital forensics and incident response (DFIR) capabilitie…
Happy New Year!
We would like to thank everyone who was reading our blog this year, keep inspiring us and we promise to provide you with the…
Volatility on Ubuntu on Windows 10
Joshua Trombley has published a useful tutorial in his OpenSec Labs blog on how to install Volatility on Ubuntu on Windows 1…
Android Acquisition and Analysis with Belkasoft Evidence Center
As you may already know, one of the most recent updates of Belkasoft Evidence Center is BelkaImager or Belkasoft Acquisition…
