Hiding in Plain Sight

With more devices having onboard storage capability than ever before, it is imperative that analysts work with investigators to ensure that every possible medium of digital storage is collected during the course of an investigation. “Traditional” mediums, such as hard drives, flash drives, tablets, cell phones, and multimedia cards, are straightforward and at the forefront of most investigations. However, one must also take into account items such as televisions, smart speakers, smart watches/fitness trackers, digital photo displays, and even exercise equipment, often referred to as the Internet of Things (IoT) devices.

This talk will cover both identifying these additional sources and a methodology to acquire and analyze these possible storage mechanisms during the course of an investigation. Brian and Jessica will also lay out baselines of a few “obscure” mediums for forensic analysts to be aware of during the course of their investigation.