Most everyone in the forensic community knows there is loads of valuable information in the Registry. One of those locations is the UserAssist key. This forensic artifact has been explained and written about in just about every forensic blog online. This registry key stores data that is ROT13 encrypted and there are a number of free …

I was recently asked to provide a list of forensic analysis techniques. After looking through some of my documents, I realized I didn’t really have an up-to-date worksheet that listed most of the common analysis techniques, even though we all have them memorized. My goal is to create a flow chart to guide a new examiner to …

On appeal, the Court affirmed the trial court’s ruling that bank business records were inadmissible for failure to properly authenticate the records and their untrustworthiness. The appellant was the third party purchaser of credit card debt from a bank. The appellant sought the balance due as well as interest, attorney fees, and costs. The Court …

  Symantec today issued the findings of its second annual Information Retention and eDiscovery Survey, which examined how enterprises are coping with the tsunami of electronically stored information (ESI) that we see expanding by the minute.  Perhaps counter intuitively, the survey of legal and IT personnel at 2,000 enterprises found that email is no longer …

For the ediscovery users out there – Acrobat 9.4.5 has a search defect. The bug, discovered by customers of Acrobat Standard and Professional in mid-June, prevents the search feature from properly highlighting results. Users only see a cursor next to the found search term, rather than the entire term being highlighted in a contrasting color, …

If your company is progressing and earning huge profits, you must be quite happy being the owner. But what if the situation reverses and some natural calamity or technical fault damages all your stored data. Now, you definitely need some data recovery system that can restore all your lost data. For this purpose, it has …

NEW YORK, Sept. 15 (UPI) – Many U.S. divorce cases now contain digital evidence from e-mail, Web visits and cell phone records. The presence of such evidence “has completely changed our field,” said Gaetano Ferro, president of the American Academy of Matrimonial Lawyers. The matrimonial skullduggery ranges from spouses hacking into each others’ e-mail accounts …

A word of warning to those individuals who have confidence in hardware-based encrypted USB flash drives. Security agency SySS has reportedly broken the AES 256-bit hardware-based file encryption utilized on flash drives built by Kingston, SanDisk as well as Verbatim. The crack relies on a weakness so amazingly bone-headed that it’s practically hard to understand. …

Most everyone in the forensic community knows there is loads of significant information in the Registry. Among those locations is the User Assist key. This forensic artifact has been described and discussed in just about every forensic website online. This particular computer registry key stores data which is ROT13 encoded and there exist several free …

  Is the replacement CEO’s background real? Does my potential CFO have a clean record? Is my partner who they say they are?

Judges loath ordering the forensic imaging of personal computers.  Here is a case where that was not a problem for the Court. In Genworth Fin. Wealth Mgmt. v. McMullan, the Plaintiffs brought a motion to compel the Defendants to produce their computers for forensic imaging, plus a preservation order and attorneys’ fees for sanctions.  Genworth …

Recently, Kim Komando wrote a USA Today article on use of intercepted digital evidence in divorce cases. The article was interesting (but please don’t take it as the final word on this complex and evolving aspect of divorce and family law). Also, keep in mind that the article applies only to certain types of computer …

Employing a private investigator isn’t the only way to gather evidence in divorce or child custody proceedings. Clandestine keylogging and tracking programs installed on home computers can provide digital proof. You should know the downsides before you install this type of software. Take the case of Beverly and James O’Brien. Beverly installed snoopware on her …

Facebook updates, tweets and other social media posts can all be obtained in divorce proceedings. So if you’re contemplating divorce in a situation where things could get ugly with custody arrangements or assets, know that your spouse will use any ammunition you unwittingly leave online to discredit you. According to the American Academy of Matrimonial …

What: Husband uses keystroke logger to spy on wife’s suspected relationship with another woman, who sues to prevent the records from being used in the divorce case. When: U.S. District Judge Thomas Rose in the southern district of Ohio rules on February 14. Outcome: Rose denies request for injunction preventing the electronic documents from being …

Many Americans struggle with the question of divorce each day, often in the context of “should we or shouldn’t we.” As the presidential season heats up, though, divorce may come into play as a campaign issue as well. Many news outlets suggest that it will be up to the mudslingers to decide whether or not …

Has your network been compromised? Is data missing or has private client information been exposed? What do you do? Is the unwanted intrusion still occurring? Can we get “control” of the situation? The news is filled everyday with network breaches. Stolen information, credit card numbers gone missing, social security information copied, and detailed unauthorized medical …

With smart phones and web enabled tablets and iPads becoming the norm, the ability to provide digital forensic analysis to mobile devices has become critical. DE provides quality mobile forensics and can provide the obtained information in a variety of formats. The first step is creating a proper forensic image of the devices, which the …