Investigations into child pornography offenses often begin with the receipt of a CyberTipline Report from the National Center for Missing and Exploited Children (NCMEC). Both prosecutors and defense attorneys should be familiar with these reports and the information th...
In criminal cases, it’s common for law enforcement to seize mobile devices and computers that might have electronically stored information that is relevant to the case at hand (with warrants, of course). In cases involving businesses, that information is often stored...
A few weeks ago, a defense attorney reached out to me for help with an upcoming felony bench trial. He had several questions surrounding the anticipated testimony of the prosecution's expert witness and needed a consultant, not a testifying expert. The prosecution's e...
This past weekend, I earned the "Magnet Certified Forensics Examiner - AXIOM" certification. I got a a 94.4%! I took the associated course a month ago but various things kept popping up and I kept putting off the test. I'm relieved to have the test out of the way and...
A couple of months ago, Guidance Software announced a short-term research program through Bugcrowd. Bugcrowd runs "bug bounty" programs for software companies through which security researchers can report security vulnerabilities and get paid for their work. In this...
A number of organizations still rely on their IT staff to examine computers for misuse but don't provide their staff with any specialized tools and/or training. This is a recipe for disaster.
Disclaimer: I'm not exactly a neutral party in this discussion because I have...
Attorneys who need to read and understand reports by computer forensics professionals and/or who need to present recovered files as evidence should understand how files are stored on computers and mobile devices, what happens when...
