Aprovechando la nube para obtener más datos en sus investigaciones forenses en móviles
Cada vez más datos de dispositivos móviles se almacenan en la nube, desde aplicaciones de terceros que almacenan datos, hasta copias de seguridad en la nube.
Content Industry: Service Providers
Hiding in Plain Sight
With more devices having onboard storage capability than ever before, it is imperative that analysts work with investigators to ensure that every possible medium of digital storage is collected during the course of an investigation.
How EDR, XDR, and SIEMs complement DFIR
Chances are if you have EDR (Endpoint Detection and Response) tools, your cybersecurity posture is mature enough that you also have DFIR (Digital Forensics and Incident Response) tooling as well. But you may be wondering: how they overlap, if at all. Do EDR tools and DFIR tools do the same thing, or do they complement each other?
DFIRL Episode 05: A Missing Person in the Digital Age
In episode 05 of Digital Forensics In Real Life (DFIRL) podcast we bring you Bill Odom, Co-Founder of Orbital Data Consulting, speaking about a missing person in the digital age. Bill began his career as a Special Agent with the FBI, where he was involved in investigations of everything from white collar crime to terrorism. … Continued
3 Reasons to Automate Enterprise DFIR Workflows
The need to automate enterprise DFIR workflows is greater than ever. Private sector and enterprise organizations are facing an onslaught of cyberattacks that shows no sign of stopping. According to a study performed by Deep Instinct the use of malware increased by 358% through 2020, and ransomware usage increased by 435% compared to 2019.
What is DVR Profiler?
If your DVR is not supported through DVR Examiner yet, you will be prompted to create a DVR Profiler report. These reports help us identify new DVRs that we haven’t encountered yet and are the first and most important step in getting your DVR supported. Without a DVR Profiler report, DME Forensics will have a much more difficult and time-consuming job of implementing your DVR.
How To Get Started with DVR Examiner
DVR Examiner allows you to recover video and metadata from CCTV and surveillance DVRs including those that are password protected or damaged. Let’s walk through the best practices to get started with DVR Examiner, including some video clips that will help you get the most out of DVR Examiner for your investigations.
Write Blocker vs. Imaging Device
So, you’ve just been handed a hard drive from your boss who gives instructions to find all the vital information on a storage device. You are immediately excited for your first solo assignment, until you look down at the hard drive and think: “Now what do I do?”
What is a Filesystem?
A filesystem is a term that Magnet Forensics uses to refer to a specific family of DVRs. Families are often made up of several different lineages all combined, right? We see DVRs the same way. We deal with the internal computer components, namely mainboards and chipsets, that come inside the DVRs. Many people are surprised … Continued
Recovering Deleted DVR Video with DVR Examiner
Many DVR users believe that by deleting video through the DVR interface, they are rendering video unrecoverable. Fortunately for forensic investigators, this is not the case. In most instances, when video is deleted through the DVR interface, only the index (or accessibility) to that video is being deleted. Assuming the video itself has not been overwritten, DVR Examiner may be able to recover it.