Content Industry: Enterprise

S1:E8 // Search warrants for cloud data: Building legal process around how online data is actually stored 

By

As more digital activity migrates to the cloud, investigators need to adjust their legal processes to align with the realities of online data storage. In this episode of Legal Unpacked, Justin Fitzsimmons will examine how to draft effective search warrants for cloud-based data, including the need to understand the types of user information providers actually collect and store.  

You’ll learn the importance of reviewing and preserving key service documents, including terms of service, privacy policies, cookie policies, and screenshots of provider-facing dashboards or archive tools, to demonstrate what data exists and how the companies retain it.  

There will also be an emphasis on defining, with precision, the types of data relevant to the investigation and supporting each request with the information courts expect: a clear explanation of the specific data sought, how that data is generated through user or system activity, where it resides within the provider’s infrastructure, why it is relevant to proving elements of the offense, and how it may help attribute the activity to a specific user. This approach provides a practical framework for satisfying the requirements of probable cause and particularity, while making your request intelligible and credible to both courts and service providers. 

S2:E3 // A tale of two outputs – man vs. the machine

By

It is a head-to-head battle of man vs machine… This special live AI Unpacked episode will discuss the outcomes of a groundbreaking research study, looking at the ability of human examiners and AI to understand and interpret complex digital forensics results. Who will come out on top? What can be learned for the future use of AI in digital forensic examinations? Will AI ever replace human examiners? Join Brandon Epstein to discuss these topics and have a look into the future of AI within digital forensics.

AI in enterprise DFIR: Moving fast, staying defensible

By

Key insights AI adoption in enterprise digital forensics and incident response (DFIR) has reached a tipping point. Data from the 2026 State of Enterprise DFIR report, drawing on insights from more than 350 enterprise DFIR professionals, shows that 68% are now using AI as part of their investigations — a more than threefold increase from … Continued

S3:E2 // IR Beyond Malware: Investigating Business Email Compromise and Fraud

By

While ransomware grabs headlines, business email compromise (BEC) quietly causes billions in losses every year. For private sector responders, these cases present unique investigative hurdles: social engineering, subtle logins, wire transfers, and abuse of legitimate SaaS features. This presentation dives into the forensic artifacts and investigative playbooks for BEC cases, including Office 365 sign-in logs, forwarding rules, OAuth abuse, and transaction metadata. We’ll explore how to triage compromised accounts, correlate access patterns with financial events, and present findings in a way that supports both containment and legal/regulatory needs. Whether you work in corporate IR, legal, or compliance, this session will equip you with the tools to tackle one of the most common—and costly—forms of corporate compromise.

Windows forensics: Understanding and analyzing Pagefile.sys artifacts

By

By Chad Gish Key insights The Windows pagefile.sys is a fundamental source of evidence in digital forensics investigations and incident response. When live RAM capture is unavailable, either due to a system shutdown, oversight, or other factors, this system-managed file can serve as the last resort for recovering critical memory-related evidence. Some examples of artifacts … Continued

C2PA and media authentication: What you need to know

By

By Brandon Epstein Key insights If you’ve been working in media forensics or the larger digital evidence community in the past six months, chances are you’ve heard about C2PA Content Credentials and their role in authenticating digital media. In this article, we’ll explore what C2PA is, how it works, and its current function within the … Continued