Forensic 4cast Live – Rerun

We did it! The first live broadcast of Forensic 4cast went out earlier today. In case you missed it (whether by accident or by design) you can watch it below. If you’ve already seen it once and want to watch it again I have the number of a really good therapist…

Watch live video from Forensic 4cast on Justin.tv

Forensic 4cast Chat Room

When I announced the live episode of 4cast a couple of people asked if we were going to have a chat room/IRC channel.

I’m happy to say that we now have that set up. For you geeky types (which is pretty much everyone) the IRC channel can be reached by using the following settings in your favourite IRC client.

Chat Room

IRC Server: Lifeline.WyldRyde.org

Port: 6667

Channel: #f4c

If you prefer things to be a little more simple you can get there by following this link http://www.forensic4cast.com/chat.html

All of these details have also been provided on the static page http://www.forensic4cast.com/live/

Forensic 4cast – Live

Last episode we had a first for our little podcast, we had our first female on the show. We struck a blow for chauvinism worldwide… well… maybe not, but it was good to have Cindy on the show. She was awesome and is welcome back anytime.

This coming Sunday (August 15) we’re going to have another first. Episode 33 will be broadcast live.

In order to make this a success we will need a lot of interaction. We currently have Jesse Kornblum and Mark McKinnon lined up as guests so if you want to ask them a question or comment on anything we discuss you can do so in a couple of ways. First you can participate via Skype. Sadly Skype isn’t particularly great at adding calls to current conversations so we’ll have to work backwards meaning that I’ll have to call you on Skype. If you want to participate you can let me know during the show by sending a message on Twitter, emailing, commenting on our Facebook group or page, or by some other means. PLEASE DO NOT SKYPE ME as this will interrupt the broadcast.

Second, I have found a hashtag that we can use on Twitter #f4c. Anything posted with this hashtag will be scrolled along the bottom of the screen during the broadcast. You can use this to ask questions, comment, or just poke fun at me.

You can watch listen to the live broadcast at http://forensic4cast.com/live/ or http://justin.tv/schizophreud

We have our own chat room set up at http://forensic4cast.com/chat.html Just enter a username and you’re good to go (no password needed).

The broadcast will begin at 8pm BST, 3pm Eastern, 12pm Pacific. Hope to see you then!

Digital Forensics Magazine Issue 4 Launches in August

Digital Forensics Magazine, one of the fastest growing resources available for IT security specialists, is launching its fourth edition in August. With a global coverage, the print and online magazine is fast establishing itself as the must-have magazine for practitioners and students of digital forensics.

Issue 4, released online on August 1st, takes a look at how effective traditional digital forensic techniques are at obtaining forensically sound data in scenarios where computer misuse has been used in attempts to frame the innocent. The DFM team also investigates and details the state of digital forensics in law enforcement around the world identifying which countries are doing well and which have much to do, highlighting the disparity in skills and qualifications between each. In a world that is getting ever more interconnected and one in which international online crime is on the increase, the industry should look to establish and apply minimum standards .

Other features include:

• Preservation of Evidence – How an organization should establish its policy regarding the investigation of a computer crime scenarios
• Psychosocial Forensics – A novel approach to operational forensics
• iPhone Forensics – An exploration of the challenges that the iPhone has introduced for the digital forensic investigator
• In “Meet the DF Professionals”, DF Mag interviews viaForensics’ Andrew Hoog
• Live Data Collection – Ron Tasker asks why we should or shouldn’t capture live data at a crime scene
• Real Time Stenography – A use case for Real Time Network Forensics
• SANS’ Rob Lee asks, “Do you have what it takes to be a digital forensics pro?”

As well as the usual book reviews, legal section and product reviews, readers are given the chance to win a free ticket to the SANS Digital Forensics and Incident Response summit either in the UK in September 2010, or in the US next July 2011.

Digital Forensics Magazine issue 4 is published online on August the 1st and digital subscriptions start at under GBP30. Users can upgrade their subscription to the print and digital version for only GBP10 at any time.

To subscribe to Digital Forensics Magazine please visit www.digitalforensicsmagazine.com.

Digital Forensics Magazine is the flagship publication of TR Media Limited, a UK-based company which specializes in publishing academic quality consumer magazines and books for the information security sector. Digital Forensics Magazine combines the depth and research of the best academic journals with the more traditional consumer feel of a trade magazine. For more information, please visit www.digitalforensicsmagazine.com

SANS Forensic Summit

Last week I attended the SANS Forensic Summit in Washington DC. What an experience it was. I got to meet many people for the first time including Mark McKinnon, Joe Garcia, Brian Moran, and Rob Lee (if I listed everyone people would get bored reading, sorry).

The event itself was fantastic I was able to watch presentations given by some of the biggest and best in the field today including Jesse Kornblum, Harlan Carvey, Troy Larson and many others. Mark and I also had the opportunity to give our presentation on Volume Shadow Copies and show a little of what Shadow Analyser will do once we release it. We seem to have gotten some positive feedback from it too. Thanks to the presentation I was even allowed to walk away with on of the SANS ‘Lethal Forensicator’ RMO. It is very nice and more people should carry them.

On the Thursday night we held the second annual Forensic 4cast Awards, the winners have already been listed on here so I won’t do it again but I will say that it was well attended and a lot of fun. I’m working on providing some more footage of the event to post online.

All in all this whole thing was awesome. Well worth attending. Next year’s summit will be moving from Washington DC to Austin, Texas. As you have nearly a year until then it is worth your time making sure that you can attend.

On a side note, while we were in DC Mark and I had the chance to go to see the Iwo Jima memorial and the Arlington Cemetery thanks to our friend Jerod. While the visit didn’t have anything to do with forensics I thought that I would share my feeling about this place.

It is both tragic and inspiring at the same time. Seeing the rows upon rows of graves of those who faithfully served their country until the end humbles me. I think of their contributions to the world, for their shortened lives, and feel not only gratitude but also a deep sense that I need to do more. Why should people like that waste their lives for me to be satisfied with mediocrity? No. I will make sure that, whatever I am and whatever I become, I’ll strive to be the best so that people like them did not, and will not, die in vain.

Now, this DOES apply to forensics. There are many in this field who continue to ‘coast’. They do their work and go home. While this is admirable I fear that it is not enough for the future. We should be actively engaged in researching and presenting our research so that all in the field can benefit from our cumulative knowledge. Let’s not wait for someone else to make the big discoveries, let’s jump in and do it ourselves.

Forensic 4cast Awards – Results #forensicsummit

Last night we held the second annual Forensic 4cast Awards at the SANS Forensic Summit in Washington DC. It was tremendous fun and was broadcast live by SANS on their website. If you want to see their coverage of the event you can do so here https://www.sans.org/webcasts/live-forensic-4cast-awards-ceremony-93653. I will be posting video of the event in the next few days.

The 2010 winners are listed below:

Outstanding Contribution to Digital Forensics – Individual
Rob Lee

Outstanding Contribution to Digital Forensics – Company
SANS

Best Digital Forensics Blog
SANS

Best Digital Forensics Book
Windows Forensic Analysis 2E

Best Digital Forensic Podcast
Inside the Core

Best Computer Forensic Hardware
Tableau T8

Best Computer Forensic Software
FTK Imager

Best Phone Forensic Hardware
Cellebrite UFED

Best Phone Forensic Software
Mobilyze

Digital Forensic Investigator of the Year
Nick Furneaux

Lifetime Achievement
Craig Wilson

4cast Awards – Votes Close Tomorrow

The Forensic 4cast Awards will take place on Thursday evening in Washington DC (have I mentioned that before?) and the voting closes tomorrow. If you have not yet taken the time to place your votes please do. Most of the voting is EXTREMELY close and one or two votes can make all the difference.

You can place your votes here:

http://forensic4cast.com/2010/06/16/forensic-4cast-awards-2010-voting-is-open/

Happy voting!

Shadow Analyser Article by The Register

Greetings all.

As you may (or may not) know Mark McKinnon, Disklabs and I are working together on a project that we call ‘Shadow Analyser’. We have put a lot of time and effort into this and hope to have it released very soon.

This last week The Register published an article about our upcoming software. If you have a few minutes it is well worth a read. It is funny to see my own name being published in such a reputable web page. Maybe I really AM the Amy Winehouse of digital forensics, then again…

Anyway, here’s the link:

http://www.theregister.co.uk/2010/06/30/shadow_analyser_digital_forensics/

Sneak Peak at the Forensic 4cast Awards

Want to know what the awards will look like? I have to admit, these do look pretty darn cool. I think they are very ‘Geek Chic’.

Anyway, here they are. Feedback is appreciated and, if you’re in contention for an award this year – how much more do you want one now? If you’re not in contention for an award – go out and convince people to nominate and vote for you in 2011.

And yes, that is pin-point accurate laser engraving. Nice.

Forensic 4cast Awards – Open to All

This is an important update on the Forensic 4cast Awards.

SANS have announced that both the Forensic Challenge Awards and the Forensic 4Cast Awards will be open to anyone that wishes to attend. This will be the case whether or not you are a delegate for the summit.

This is superb news and I’d like to say a huge thankyou to SANS for making this possible. If you’re going to be in the DC area on July 8 2010 please make sure to stop by and attend the awards. If you can’t be in DC for the awards, I would first ask “WHY NOT?” but then I’d console you and tell you not worry too much as SANS are also pushing the awards out by simulcast. We’ll have the link for you closer to the time but that is awesome. This means that you have no excuse to not attend in some capacity.

I’ve also been informed of the possibility of food (this is yet to be confirmed though). Even if the entertainment of the awards doesn’t entice you to come the food should!

This should be an exceptional event as there all kinds of people will be there, from Rob Lee, to Harlan Carvey, to Mark McKinnon. Its your chance to meet these pillars our our community and to commiserate them when someone else wins their awards

The times for the awards are:

• 630 PM Forensic Challenge Awards
• 730 PM Forensic 4Cast Awards

The events will be held at:

Fairmont Washington DC
2401 M Street, NW
Washington, DC 20037

Now, on to the next item of business… anyone out there willing to perform a song or two for the awards?

Next Page »