dfm covers

WHAT'S COMING UP IN ISSUE 34 - Out February 2018

Continuing our aim of bringing you new and interesting articles from the world of Digital Forensics, Issue 34 is shaping up to be another good mix of research and practical advice, here is just a taste of some of the articles being considered.

Device Forensics in the Internet of Things

As more businesses and consumers adopt IoT devices, privacy violations and cyber-attacks by malicious actors will become commonplace due to the insecure IoT infrastructure. When incidents occur, the nature of IoT devices creates challenges for digital forensics investigations. This article serves as an introduction to IoT forensics with a focus on device level forensics.

Data Destruction In Current Hard Disks & Data Destruction Techniques

Data destruction is a process traditionally applied using physical techniques, aiming at the completely destruction of the hard disk, however, there is an increasing interest in the use of logical techniques for data destruction, that allow reusing the physical device. This work aims to evaluate the effectiveness of the standards (0, 1 and random) used in logical techniques to overwrite the data stored on hard disk. This evaluation is performed through the Magnetic Force Microscopy (MFM) technique, to verify if it is possible to “reconstruct’’ the original data stored on the hard disk after the data destruction process.

Faster Searching For Known Illegal Content

Cryptographic (“MD5”) hash searching for known illegal material is one of the most thorough methods of digital forensic investigation. However, the technique is hampered by the ever-increasing size of media being examined, and the size of the hash list being searched. The authors will examine a new equivalent technique that can be up to 20 times faster.

Advancements in Windows Hibernation File Forensics

Windows hibernation files can be a valuable source of information for digital forensic investigators. This article describes how recent developments in hibernation file analysis go beyond reconstruction of active memory. Recent tool developments allow for examination of reconstructed data from operating systems through Windows 10, hibernation slack, and data that exists after this slack that allow investigators to extract the most value and information out of this critical file.

Psychological Analysis Behind Cyber Crimes

This feature article is all about how digital forensics plays a major role in the modern era of technology. We are not limited to defend digital/cyber crimes but also conduct scientific investigation to understand how the crime took place. This article outlines not just how the crime took place or how the crime was investigated. This article covers why the cyber crime was carried out in the first place. What made the criminal think to commit the crime is just as important in producing future preventative measures.

Plus all our usual features "From The Lab", "360", "IRQ" and "Legal news and alerts".

Note: We may change the planned content of future issues without notice.

Subscribe Today

Please make cache directory writable.

Submit an Article

Call for Articles

We are keen to publish new articles from all aspects of digital forensics. Click to contact us with your completed article or article ideas.

Featured Book

Learning iOS Forensics

A practical hands-on guide to acquire and analyse iOS devices with the latest forensic techniques and tools.

Meet the Authors

Andrew Harbison

Andrew Harbison is a Director and IT Forensics Lead at Grant Thornton


Coming up in the Next issue of Digital Forensics Magazine

Coming up in Issue 38 on sale from February 2019:

Crowd Sourcing Digital Evidence The Risk v The Reward

All digital devices used today can be considered as a potential source for digital evidence. Andrew Ryan investigates the current state in the art of crowd sourced digital evidence. Read More »

Recovery of Forensic Artifacts from Deleted Jump-List in Windows 10

Jump-Lists are widely discussed in forensics community since the release of Windows 7 and are having more capabilities to reveal forensics artifacts in Windows 10. Read More »

Subscribe today

Operacion Bitcoin

The article is an actual case study of an Interpol investigation carried out in association with CertUY that has been ongoing for some months. It is written by the first hacker sent to prison in Uruguay who is currently out on bail pending sentencing. Read More »

Every Issue
Plus the usual Competition, Book Reviews, 360, IRQ, Legal

Click here to read more about the next issue