Rethinking digital forensics in incident response
The term DFIR has become really popular over the last several years and is used as an all-encompassing term for digital forensics and incident response.
The term DFIR has become really popular over the last several years and is used as an all-encompassing term for digital forensics and incident response.
Effektive, schnelle und präzise Incident Response ist eine Teamleistung. Wenn Ihre forensischen Werkzeuge nicht die gleiche Sprache wie das IR-Team sprechen, wird der Austausch kritischer Informationen ineffizient.
Today’s business environment is constantly evolving. Communication is shifting from traditional email to short messages and data sources are expanding from computers to cloud, IoT, mobile devices, and beyond. To keep up, your digital investigative solutions must meet the demands of emerging and complex threats, evolving data sources, new regulations, and fast-paced communication channels—including the need for reliable remote data collection.
When you need to provide the full picture of a case to your legal team, digital forensics solutions and methodologies are critical for collecting, preserving, analyzing, and presenting digital evidence in legal contexts.
Dado que más del 80 % de los casos penales dependen de las pruebas de video, desde la vigilancia por DVR hasta las cámaras corporales y las fuentes en la nube, es esencial contar con una solución eficaz y fiable para adquirir y revisar el video.
Im Dreamworks-Film “Shrek” sagte die Titelfigur: “Oger sind wie Zwiebeln. Sie haben Schichten.” Nun, Apple unterscheidet sich nicht so sehr von dem grünen Helden, denn ihr liebenswertes Monster, iOS, weist ebenfalls eigene Schichten von Datenstrukturen im gesamten Dateisystem auf. Diese Folge von Mobile Unpacked wird sich damit befassen, wie man diese Strukturen identifiziert und wie man die verschiedenen Schichten Stück für Stück freilegt, um die wichtigen Artefakt-Daten zu finden, die in unterschiedlichen Dateitypen wie SEGB, Plist-Dateien und SQLite-Datenbanken verborgen sind.
In the Dreamworks film Shrek, the titular character said that “Ogres are like onions. They have layers.” Well, Apple isn’t so different from the green hero in that their lovable monster, iOS also features its own layers of data structures all over the file system. This episode of Mobile Unpacked will cover identifying these structures and how to peel back the different layers to find the key artifact data hidden across different file types such as SEGB, Plist files, and SQLite Databases.
In this talk, a snapshot of available and emerging AI tech that impact forensics will be provided, along with a starting point for more R&D on the intersection of AI, law, & evidence. Intended for pros with a knowledge of evidence principles—but seeking to deepen their understanding—we’ll explore applications of AI technologies in forensics. We’ll also highlight technical and legal challenges in discovering, acquiring, collecting, analyzing, and reporting evidence. Additionally, we will provide cautionary information/suggestions for the responsible and legitimate use of AI.
En esta presentación tocaremos cual es el rol del analista más allá del uso de herramientas de peritaje digital forense. Desde la formación ideal del perito, el análisis de la evidencia, y la presentación de los reportes esta charla busca que volvamos a comprometernos con la misión, la diligencia, y el alto nivel de competencia que nuestro campo requiere.
El cambio al trabajo remoto ha intensificado la necesidad de soluciones DFIR empresariales que puedan adquirir datos de endpoints remotos de manera confiable y más eficiente, al tiempo que brindan a las partes interesadas una visión más amplia de toda la organización.