Description

In the second episode of Chewing the FAT, Phil and Adam host special guest Heather Mahalik to discuss SANS coming together with the leading industry vendors to produce a validation guide plus we run through some of the recent Digital Forensics industry news.

For the second Forensic Faux Pas segment to air, special guest Heather shares a couple of their embarrassing stories of things that went wrong from their early days plus some great stories from our listeners.

Links for some of the content we discussed during the show:

The State of Android Health Data (Part 1) – Garmin

https://thebinaryhick.blog/2021/05/22/the-state-of-android-health-data-part-1-garmin/

 Rabbit Hole from CCL (Alex Caithness)

https://uploads-ssl.webflow.com/5f02f2c93eab87a6ea84e2f3/60364c14ce5f0e240b78de9c_RabbitHole_DD_2021.pdf

 MSAB partner with Detego:

https://www.forensicfocus.com/news/detego-joins-forces-with-msab-in-strategic-digital-forensics-partnership/#:~:text=Detego%C2%AE%20Joins%20Forces%20With%20MSAB%20In%20Strategic%20Digital%20Forensics%20Partnership,-17th%20May%202021&text=Detego%2C%20global%20leaders%20in%20rapid,in%20mobile%20device%20digital%20forensics.

 Should encryption be curbed to combat child abuse?

https://www-bbc-co-uk.cdn.ampproject.org/c/s/www.bbc.co.uk/news/business-57050689.amp

 Impacts of COVID 19 on the risk of online child sexual exploitation:

https://www.arts.unsw.edu.au/sites/default/files/documents/eSafety-OCSE-pandemic-report-salter-and-wong.pdf

 Microsoft and UK government make it easier for public sector to use Azure:

https://news.microsoft.com/en-gb/2021/05/11/microsoft-and-uk-government-make-it-easier-for-public-sector-organisations-to-use-the-azure-cloud/

 Heather's link to DFIR Summit:

https://www.sans.org/event/digital-forensics-summit-2021

Six Steps to Mobile Validation – Working Together for the Common Good

A joint effort with collaboration from across several major DF vendors resulted in a joint standards paper being released by SANS shortly afterwards, promoting good practice.

https://www.sans.org/blog/six-steps-to-successful-mobile-validation-paper/

Signal Story:

Original claim and reply posted in Dec 2020, about "breaking signal encryption"

https://signal.org/blog/cellebrite-and-clickbait/

21st April 2021, posted new blog outlining vulnerabilities in Cellebrite software.

https://signal.org/blog/cellebrite-vulnerabilities/

Cellebrite response:

https://www.cellebrite.com/en/our-mission-remains-clear/

We would like to say a special thanks to the EU Formobile Project for supporting and helping fund this project. Without their support we would not have been able to get this off the ground.

You can visit the Formobile website at: https://formobile-project.eu/

This project has received funding from the European Union's Horizon 2020 - Research and Innovation Framework Programme, H2020-SU-SEC-2018, under grant agreement no. 832800.

Hosted on Acast. See acast.com/privacy for more information.