Shows
Digital Forensics NowBrett Shavers Blogging Extravaganza!Send us a textThis episode digs into the habits that actually hold up: learning from CTF wins and post-event reviews, exploring scholarships and Reno trainings that build technical muscle, and walking through expert-witness prep that turns courtroom stress into structured, confident testimony.We’ll unpack Brett Shavers’ reminder that truth alone doesn’t win cases—procedure, documentation, and bias-aware methods do. Clear writing matters too; vague language can undermine solid work.On the tools side, RabbitHole v3 now recovers deleted SQLite records and rebuilds them into query-ready databases—speeding validation and reporting without lo...
2025-10-311h 14Digital Forensics NowBlogs, blogs & blogs!Send us a textA baby camel, a high-speed chase, and a heartfelt tribute set the stage for a season opener that is equal parts human and hard-nosed.We pause to honor Mark Baker, mentor, officer, and friend.This episode spotlights a free Belkasoft AI course along with the much-anticipated release of Rabbit Hole v3, designed to tackle complex data structures.From there, it is all about blogs, and there are plenty of them. Mattia explores extraction nuances, showing how AFU versus BFU states and encryption classes still determine what you...
2025-10-031h 14Digital Forensics NowDFN: 2nd AnniversarySend us a textWe celebrate our two-year podcast anniversary and discuss the importance of thorough case preparation for CSAM cases, courtroom experience, and extracting evidence from iOS devices.• SANS Difference Maker Awards open for nominations through September 15th across multiple categories• AI debate webinar with Magnet Forensics scheduled for September 17th• Binary Hick's blogs reveal insights on iOS search party and Samsung's Rubin and Digital Wellbeing databases• Discussion on properly preparing CSAM cases for trial with understanding of statutes and evidence requirements• Brett Shaver's article highlights importance of attending trials to underst...
2025-08-291h 04Digital Forensics NowFrom Cryptic Apps to Clickable Maps: Making Sense of Digital EvidenceSend us a textWe're back! After a short break we are back to discuss the growing crossover between real-world events and digital evidence in court cases, highlighting how device data can make or break timelines in high-stakes investigations.This episode covers:Ian Whiffin’s latest forensic work, including iOS power log timestamps, Apple Health data reliability, iPhone battery temperature readings, and IR Doppler functionality – with examples of how these artifacts were used in a recent homicide trial to validate timelines and environmental conditions.Kevin Pagano’s App Store Package Search tool, which translates obscur...
2025-08-011h 16Digital Forensics NowTechno, Timeline, and Training TruthsSend us a textWe kick off this episode with highlights from the Techno Security Conference, our 80s-themed outfits, packed LEAPP labs, AI panel discussions, and great conversations with friends and colleagues across the field.We discuss Brett Shavers’ recent series on DFIR entry-level work, and share our thoughts on the need for better forensic training and clearer distinctions between forensics, cybersecurity, and incident response.We also talk about recent tool changes in the industry. Cellebrite’s acquisition of Corellium could make mobile app testing more accessible, and Magnet’s purchase of Dark Circui...
2025-06-271h 06Digital Forensics NowEvery Breath You Take, Every Swipe You Make—Your iPhone’s Logging ItSend us a textApple devices are constantly recording user activity, yet few forensic examiners are making use of the vast amount of data these systems quietly generate. Apple's Unified Logs and Spotlight databases track nearly everything that happens on an iOS device, often without the user realizing it.Would you believe an iPhone can generate around 1.5 million log entries in just 15 minutes of regular use? These records include highly specific actions—such as the exact moment Face ID is used to unlock a device, when the phone is flipped face-up, or whether a user in...
2025-05-161h 15Digital Forensics NowStomping Grounds: Digital Forensics at IACIS 2025Send us a textThe Digital Forensics Now podcast brings together the core LEAPPs developer team for a candid, unscripted conversation about mobile forensics, legal challenges, and the future of their tools during the IACIS conference in Orlando.• First time bringing together most of the LEAPPs development team in person• Florida's new requirement for 10-day search warrant renewals creates significant challenges for long-running forensic processes• Timestamp parameters in warrants can limit investigators' ability to discover relevant evidence• Paladin now includes the LEAPPs integration, making powerful open-source forensic tools more accessible• Real-world success st...
2025-05-0232 minDigital Forensics NowThe "Bear" Essentials of Digital Forensics 🐻Send us a textThe digital forensics world isn’t slowing down — and neither are we. In this episode, we celebrate Heather’s well-deserved recognition as Cellebrite’s Mentor of the Year 2025. Naturally, there were a few speech mishaps and, somehow, a bear raiding Heather’s bird feeder (yes, actual wildlife). But between the chaos, we get serious about the fast-changing landscape of digital evidence collection.We dig into Amazon’s decision to remove the "do not send voice recordings" setting from Echo devices — meaning all voice requests now head straight to the cloud for AI training. I...
2025-04-111h 13Digital Forensics NowThe Iceberg of Digital Evidence: What AI Can't SeeSend us a textThe boundary between tool-dependent analysis and true forensic expertise grows increasingly blurred as AI enters the digital forensics landscape. Alexis Brignoni and Heather Charpentier reunite after a month-long hiatus to sound the alarm on a concerning trend: the integration of generative AI into forensic tools without adequate safeguards for verification and validation.Drawing from Stacey Eldridge's firsthand experience, they reveal how AI outputs can be dangerously inconsistent, potentially creating false positives (or missing critical evidence) while providing no reduction in examination time if proper verification procedures are followed. This presents investigators...
2025-03-071h 06Digital Forensics NowMind Matters: Navigating DFIR with BalanceSend us a textGet ready for a hands-on look at digital forensics and the challenges professionals tackle every day. We share a story about forensic guessing that highlights the importance of testing assumptions and following the evidence to avoid errors. The discussion emphasizes how staying grounded in facts can prevent investigations from going off track.We also highlight advancements in forensic tools and training. Learn about tools like Belkasoft, the UFADE tool for iOS device extraction, and SQBite for SQLite database analysis. These tools are improving efficiency and accessibility in the field. B...
2025-01-241h 03Digital Forensics NowNew Year, New Discoveries: Diving into Digital Forensics!Send us a textKick off your new year with some forensic fun as we recount our holiday escapades and dive into the latest in digital forensics! Ever wondered how RAM dumps from Android devices can reveal crucial data? We spotlight MSAB's innovative RAMalyzer tool and their new blog series covering RAM from mobile devices. Discover how the digital forensics community is collaborating to propel the field forward, as we share insights from the DF Pulse 2024 Digital Forensic Practitioner Survey and the delicate dance between competition and cooperation. Standardization is the name of the game, a...
2025-01-031h 16Digital Forensics NowThe Gift of Expertise: Why Forensics Matter in the CourtroomSend us a textJoin us for a holiday-themed episode of Digital Forensics Now, where we blend expert insights with personal stories from the field of digital forensics.This episode delves into cutting-edge tools and techniques for digital forensics. Explore insights from Arsenal on advanced methods for analyzing swap space and memory files. We also share experiences with the Samsung Secure Health Data Parser, highlighting the challenges of decrypting health databases and the critical role of UFED in overcoming them. Don’t miss an in-depth look at the remarkable features of ArtEX, showcasing its value to...
2024-12-131h 19Digital Forensics NowBFU Data, Forensic Tools, and the Future of Digital InvestigationsSend us a textThe latest episode of Digital Forensics Now kicks off with lighthearted banter about Heather's newfound fame in commercials, bringing a fun and relatable start to a tech-heavy discussion. Following the laughs, the conversation shifts to an invigorating recap of Alexis' recent experience at SANS DFIRCON, featuring interactions with digital forensics luminaries like Brian Maloney and Ian Whiffin. Ian's ArtEx tool, which cleverly maps locations for forensic investigations, also takes center stage as a highlight of the conference. The episode weaves in personal reflections, including a scenic family train ride from Orlando to Miami...
2024-11-221h 17Digital Forensics NowiOS 18’s Inactivity Reboots Explained: AFU to BFU Transitions with Chris Vance from Magnet ForensicsSend us a textJoin us on the Digital Forensics Now podcast as we explore the details of the iOS 18 inactivity reboot issue with mobile forensics expert Christopher Vance from Magnet Forensics. Chris traces the origins of this challenge back to iOS 17 and explains how unified logs play a key role in diagnosing these system memory resets. This episode is packed with valuable insights for anyone interested in the inner workings of iOS devices and the unique considerations they present in digital forensics.We also discuss device security and data preservation, focusing on iOS devices...
2024-11-151h 02Digital Forensics NowAI in Court: Testimony or Tech-tastrophe?Send us a textCould AI in forensic analysis be more of a liability than an asset? Join us as we explore this pressing concern. We kick off this episode with an important update for those dealing with Android extractions. Recent changes to the Android OS and Google Play Store might be causing the Keystore (secrets.json) file to either miss data or not be extracted at all. This brings attention to the vital role decryption keys play in accessing data from mobile devices.Next, we dive into advancements in forensic tools like M...
2024-10-181h 14Digital Forensics NowAwareness Unlocks Discovery: Knowing It Exists is the First Step to Finding ItSend us a textJoin us as we discuss the latest blogs and training opportunities available to keep you at the forefront of digital forensics.We’ll then dive into the release of iOS 18 and its impact on digital forensic investigations. Beyond tools and gadgets, we'll explore the shift towards cloud-based evidence storage, weighing its benefits and security challenges against traditional air-gapped networks.Whether you're a seasoned professional or just beginning your journey, this episode offers a mix of education, entertainment, and a sense of community, all with a dash of geek culture fu...
2024-10-041h 05Digital Forensics NowBalancing Act: Trials, Training, and the Future of Digital ForensicsSend us a textRecognizing excellence is key in our community, and we spotlight the SANS Difference Maker Awards and Cellebrite Summit Digital Justice Awards. Discover why it’s crucial to nominate your peers and learn about the newly opened registration for IACIS 2025 training classes, featuring must-attend courses like Advanced Mobile Device Forensics. While highlighting a recent article by Brett Shavers, we stress the significance of continuous education and community acknowledgment in helping digital forensics professionals grow and excel.Our conversation delves into the technical challenges of iOS Telegram data analysis and the dev...
2024-09-131h 06Digital Forensics NowAI as a Report Writing Tool: Accuracy Enhancing or Recollection Poisoning?Send us a textWhat's the real impact of AI on law enforcement documentation? Can digital forensics tools truly revolutionize our investigative processes? These are just some of the provocative questions we tackle in our season two premiere of Digital Forensics Now! Join us as we celebrate our one-year anniversary with reflections on the past year, exciting updates, and plans for the future. The episode takes a deep dive into the ethical and practical implications of AI in law enforcement, sparked by a recent AP News article on police officers using AI chatbots for writing c...
2024-08-301h 07Digital Forensics NowBird Cameras and Forensic Insights from New ZealandSend us a text(THIS IS WHAT AN AI GENERATED DESCRIPTION WITH NO HUMAN CORRECTIONS WILL PROVIDE FOR YOU! SO NATURALLY WE HAD TO KEEP IT HAHA!)What happens when a digital forensics expert sets up a podcast studio in a cupboard under the stairs and a co-host becomes a modern-day Snow White with her Bird Buddy camera? You get a lively and engaging episode of the Digital Forensics Now podcast! Alexis Brignoni, aka Briggs, and Heather Charpentier kick off this special episode with humor and camaraderie, sharing personal anecdotes and giving shout outs to...
2024-08-091h 13Digital Forensics NowDue Diligence, Password Cracking & New Tool FeaturesSend us a textWelcome back to another episode of the Digital Forensics Now podcast! In this episode, we explore the critical need for continuous learning in the field, discuss fascinating forensic tools, showcase UFADE with its new chat capture feature, and engage in a spirited debate on the value of certifications. Get ready to expand your knowledge and stay at the forefront of this ever-evolving industry.We begin by discussing the intricacies of unconscious and conscious incompetence as outlined in Brett Shavers new article. The episode continues with a detailed demonstration of UFADE, created...
2024-07-121h 23Digital Forensics NowMicrosoft recall of Recall & all of the latest Digital Forensic News!Send us a textJoin us as we recount our recent travels to Argentina and the Techno Security & Digital Forensics conference. We'll share the highlights of our trips before diving into the core content.What could possibly go wrong with a feature designed for user convenience? We'll scrutinize Microsoft's controversial "Recall" feature, exploring its significant privacy concerns and implications for digital forensics. From unencrypted data to automatic opt-ins, we speculate on the potential user backlash. We'll also dive into the latest tech updates, including CCL Solutions Group's enhancements to the Rabbit Hole tool and how...
2024-06-141h 07Digital Forensics NowAndroid Security, Market Acquisitions, Research, Tools & More Tools!Send us a textJoin us for an engaging session where we'll recap recent events and activities before diving into the latest research, cutting-edge tools, and exciting updates!Tune in as we explore groundbreaking research conducted by emerging stars in the DFIR community. We'll delve into the testing of data stored in iOS Unified Logs, focusing on driving and motion states—this is sure to be fascinating. Discover the newly documented multi-user/multi-account functionality, such as Samsung's Dual Messenger, uncovered by a newcomer to digital forensics. Stay informed about enhancements and new capabilities for tools li...
2024-05-171h 23Digital Forensics NowLive from IACIS with the Phone Wizard, Bill Aycock!Send us a textLive from the International Association of Computer Investigative Specialists (IACIS) with special guest Bill "the phone wizard" Aycock!!Notes:Three New SANS Postershttps://www.sans.org/posters/ios-third-party-apps-forensics-reference-guide-poster/https://www.sans.org/posters/android-third-party-apps-forensics/https://www.sans.org/posters/dfir-advanced-smartphone-forensics/New Release of Mushyhttps://doubleblak.com/app.php?id=MushyBlue Crew Forensicshttps://bluecrewforensics.com/2022/03/07/ios-app-intents/
2024-05-0357 minDigital Forensics NowFrom Disaster to Attainment: Crafting Digital Forensic ReportsSend us a textNavigating the complexities of digital forensics can be daunting, but this week we've got your back with the exploration of Magnet Forensics' Axiom version 8, and its transformative Mobile View feature. As your hosts we're not just sharing tech updates; we're discussing the impact these tools have on our work and how they shape the narratives we construct. When it comes to the integrity of an investigation, the devil is in the details—and in the documentation. We delve into the craft of forensic reporting, dissecting why an analyst's narrative is just as...
2024-04-121h 24Digital Forensics NowApple Is At It Again, Changing Our Logicals!Send us a textIn mobile forensics, with each update brings new challenges and opportunities. Join us as we dissect the latest iOS 17.4 impacts, including the nuances of SQLite databases and the advent of write-ahead logs in Advanced Logical extractions. Our episode is brimming with insights that could change the way you approach data extraction and parsing. The forensic landscape is ever-evolving, and this episode isn't shy about the hurdles we face, or the workarounds that keep us ahead. Discover how matching forensic work environments with devices' native operating systems and utilizing tools like Christian P...
2024-03-291h 26