tag:blogger.com,1999:blog-8839981365154987340Sat, 21 Jan 2012 14:04:04 +0000Windows XPFake Computer Forensics ExaminersLynita HinschFair Trial InitiativeLive Linux CDsUsed LaptopsWindowsTalk radiocourtroom presentationsMassive Multiplayer Onlinecredit card fraudNational Institute of JusticeOrganizationsMelendez-Diaz v. MassachusettsCybercime Cases.Data logginginformation superhighwayOpen sourcecell phonesCacheBackkids arrestedIdentity TheftBackupUnverified Senderdiscovery issuesComputer Forensics Art and ScienceAttorneysVersa CheckExpert SystemsNetSentrypost-mortem computer forensicsPoliceDefeating Computer ForensicsWord of WarcraftArticle SuggestionsProfessional certificationDrive letter assignmentDaubertC. MambrettisecretsDNASearch EnginesSearch WarrantUniversity of WashingtonPhotoshop ForensicsJPEGOpposing expertBogus Computer Forensics ExpertForensics BlogsFBIHelp Haiti ScamsArt and Science ofCasey AnthonyLimewireEmploymentMP3 PlayerNet NannyExpert systemBlog Talk RadioUnited StatesStreet ViewEthics in Computer ForensicsTechnical ArticlesinterviewWindows Forensic AnalysisDigital Forensics PracticePlea BargainMMORPG ForensicsLee WhitfieldUK PoliceFree SpeechForensic ScienceTypedURLsForensic facial reconstructionCareers in Computer ForensicsBuyer BewareExpertAmerican Academy of Forensic SciencesRecycle BinEntwistleRick RolledPresidential DebateNC Jury ViewPrivate Investigator LicensingtextingInternet CachingVirusesUniform Resource LocatorFile ManagementP2P File SharingContrabandJule AmeroTweetDeckComputer securityAustrailiaChallenging Computer Evidencedeleted dataExpert WitnessesMicrosoftOperation FairplayCrime SceneScotland YardCell phone forensicsStandardized testWorld of WarcraftProsecutionPodcastSANS InstituteSims OnlineLarry Daniel InterviewIPadBlogging TopicsDigital Forensic AwardsSolicitationCompTIAGlobal Positioning SystemForensicsSpyware and AdwareComputer Forensic TestimonyComputerCopEncryptionCriminal DefenseIP addressRouterCivil vs CriminalSpywareApprenticeshipLaw FirmsCEIC 2010CourtLogsForensic4CastMark McKinnonObamaSANS Summit 2009SpamLawChild PornFacebookComputer Forensic JobsLive ForensicsChloroform HitsSocial NetworkingDefendantRecording Industry Association of AmericaRoleplayingInternet CacheAutopsyE-mail addressMetadataComputer Online Forensic Evidence ExtractorWi-FiWindows RegistryCertificationData Loss PreventionComputer SupportConfidential nature of computer forensicswrite blockerRoad rageNetwork monitoringLaw EnforcementJustice SystemTrial ConsultingMissing TeensStengerElectronic discoveryTrojan Horse DefenseComputer Forensics TestimonyAndy SpruillGoogleExpert WitnessDenial-of-service attackBusinessFryephishingFake HyperlinksSocial ResponsibiltyMicrosoft WindowsDefense AttorneyChildrenSHA hash functionsBack Tracking EmailsMissing ChildCourt TestimonyICECommercial ServicesEntrapmentCrime and JusticeOSI modelHarlan CarveyP2Pcell phone featuresPrivacy lawCompaniesLegislationData LeakageGuidance SoftwareComputer Forensics ExpertsYahoo mailSONY DATA BREACHStored cell phone locationsEverquestAmazon.comCrimedeleted text messagesCell Phone SafetyFile formatFreedom of speechCorporate ITFolder (computing)Digital ForensicsSearchingIncident Managementcomputer forensics licenseComputer Forensics Training.South African Revenue ServiceKirk OsborneFun with ITPrivacyMalicious Softwarecomputer forensic defense expertsLaw Enforcement OnlyData recoveryMD5AntivirusEthicsGoogle Street ViewCouncil of Digital Forensic SpecialistsCapital DefensePacket (information technology)Expert BiasPI Licensingchild porn arrestRulingshayes command setChild PornographyDigital TriageSteve BurgessChloroformFile Transfer ProtocolTax refundGeolocationposition paperSANScamera phonesGmailHard disk driveInternet StingComputer Forensics CertificationsUsed ComputersForensic ToolkitSyngressForensics Talk ShowInternet predatorsCourt PresentationsForensic MagazineWorld Wide Webchat roomsOperating systemJim HoerricksChallenging computer forensics evidenceCyber PatrolDo No harmLearningDigital Forensics ProfessionMurdernorth carolinaComputer ForensicsOn-line game forensicsIncident ResponseInternet PredatorChild Porn TrapForensics MagazineMatt Shannonwral-tvNetAnalysisHackingTalk ShowPostcard MysteriesRob LeeIntrusion Detection SystemsComputer RepairEducationWirelessTwitterInformation technologynorth carolina. computer forensics licenseMcCainRadio ShowWireless routerVirtual RealityFrank BenderComputer Forensics ExpertFile managerMyspaceDOJDrive ProphetHotmailSecurityHelixCyberspaceExaminer QualificationsPlain View DoctrineForumBrowser CachingForensic Video Analysis4th AmendmentSIMPLENational Academy of SciencesNAMUSMuscle memoryMedicineComputer Forensics ShowLarry DanielComputer Repair Expectation of PrivacyJuriesElectronic Communications Act. File SharingKazaaFederal Bureau of InvestigationParanoiaForensic SculptingFilesharingFirst responderJuryBN.comRogue softwareExpert TestimonySouth Africaconsent to searchGnutellaInternetThe Juror InvestigatesNetwork Packet ForensicsUnited States Court of Appeals for the Ninth CircuitComputer Forensics CareerBradleyPlain ViewMicrosoft WordInternet ProtocolToyota CamryWireless networkInnocence ProjectHobbySextingTalk Forensics RadioSupreme CourtUrban Sex TraffickingEvidenceKnowledgeMalwareHealth careDatacell phones and crimeprimary expertDigital Forensics ScienceMicrosoft AccessMMORPGMobile phoneSex CrimesAnti-ForensicsBrowser hijackingJoseph FinderSocial networke-discoveryVerdictHaitiVoom TechnologiesInternet safetyPersonal InjuryTrainingGeneral DynamicsCyberbullyingPop-upsTyped URLsSecond LifeDigital cameradiscoveryComputer ForeniscsBookshttp://exforensis.blogspot.com/noreply@blogger.com (Larry E. Daniel, DFCP, EnCE, BCE)Blogger176125http://feeds.feedburner.com/ExForensis?format=skinhttp://creativecommons.org/licenses/by-nc-nd/3.0/http://creativecommons.org/licenses/by-nc-nd/3.0/http://creativecommons.org/images/public/somerights20.gifExForensishttp://feedburner.google.comSubscribe with My Yahoo!Subscribe with NewsGatorSubscribe with My AOLSubscribe with BloglinesSubscribe with NetvibesSubscribe with GoogleSubscribe with PageflakesSubscribe with PlusmoSubscribe with The Free DictionarySubscribe with Bitty BrowserSubscribe with Live.comSubscribe with Excite MIXSubscribe with WebwagSubscribe with Podcast ReadySubscribe with WikioSubscribe with Daily Rotationtag:blogger.com,1999:blog-8839981365154987340.post-3434851671494127469Tue, 19 Jul 2011 14:44:00 +00002011-07-21T09:32:12.310-04:00Chloroform HitsChloroformStengerCacheBackNetAnalysisCasey AnthonyBradley I was reading the comments by readers of the story that appeared in the NY Times on July 18, 2011 regarding the chloroform searches in the Casey Anthony case. Software Designer Reports Error in Anthony Trial Several people commented that they didn't understand why John Bradley didn't notify the defense team or the media of the discrepancy in the 84 searches for chloroform in the Casey Anthonyhttp://feedproxy.google.com/~r/ExForensis/~3/cUGr1DVlG_M/casey-anthony-more-on-chloroform.htmlnoreply@blogger.com (Larry E. Daniel, DFCP, EnCE, BCE)0<img src="http://feeds.feedburner.com/~r/ExForensis/~4/cUGr1DVlG_M" height="1" width="1"/>http://exforensis.blogspot.com/2011/07/casey-anthony-more-on-chloroform.htmltag:blogger.com,1999:blog-8839981365154987340.post-1427950722718383864Tue, 12 Jul 2011 13:00:00 +00002011-07-12T09:00:58.222-04:00Chloroform HitsCasey AnthonyComputer Forensics TestimonyJohn Bradley who testified about the chlorofrm search hits at the Casey Anthony trial responds to the questions about his testimony. This is well worth reading if you want to get the inside scoop on what occurred regarding the Internet History in the Casey Anthony case regarding the chloroform searches, according to Mr. Bradley. The link to John's response is below: http://www.cacheback.ca/http://feedproxy.google.com/~r/ExForensis/~3/YQ7Ww5TLf70/john-bradley-responds-to-chloroform.htmlnoreply@blogger.com (Larry E. Daniel, DFCP, EnCE, BCE)0<img src="http://feeds.feedburner.com/~r/ExForensis/~4/YQ7Ww5TLf70" height="1" width="1"/>http://exforensis.blogspot.com/2011/07/john-bradley-responds-to-chloroform.htmltag:blogger.com,1999:blog-8839981365154987340.post-7790249451825373715Tue, 12 Jul 2011 01:35:00 +00002011-07-11T21:57:00.546-04:00ChloroformCasey AnthonyDigital Detective posted an excellent analysis of the MORK file that was part of the Casey Anthony trial evidence related to the computer searches, particularly for chloroform. Here is a link to the post. Digital Evidence Discrepencies - Casey Anthony Case  it is highly technical, but I would expect no less from the people who make NetAnalysis, a forensic tool I have used for several years now.http://feedproxy.google.com/~r/ExForensis/~3/jMjUYas96ng/casey-anthony-digital-evidence.htmlnoreply@blogger.com (Larry E. Daniel, DFCP, EnCE, BCE)2<img src="http://feeds.feedburner.com/~r/ExForensis/~4/jMjUYas96ng" height="1" width="1"/>http://exforensis.blogspot.com/2011/07/casey-anthony-digital-evidence.htmltag:blogger.com,1999:blog-8839981365154987340.post-7389283693461643463Fri, 08 Jul 2011 05:28:00 +00002011-07-08T01:29:27.883-04:00Image via WikipediaJoe Windish posted an article on the need for a computer forensics innocence project. For A Computer Forensics Innocence Project over at the TheModerate Voice.  What he advocates makes a lot of sense. "What we need is a Computers Forensics version of the Innocence Project. We need experts who believe in the presumption of innocence and are willing to spend the time it takes http://feedproxy.google.com/~r/ExForensis/~3/Zojms7SqQ64/digital-forensics-innocence-project.htmlnoreply@blogger.com (Larry E. Daniel, DFCP, EnCE, BCE)2<img src="http://feeds.feedburner.com/~r/ExForensis/~4/Zojms7SqQ64" height="1" width="1"/>http://exforensis.blogspot.com/2011/07/digital-forensics-innocence-project.htmltag:blogger.com,1999:blog-8839981365154987340.post-8818829620204195475Tue, 05 Jul 2011 21:20:00 +00002011-07-05T17:20:16.590-04:00Casey AnthonyVerdictJustice SystemHaving spent two and a half years as a consulting expert in computer forensics and cell tower forensics on the Casey Anthony defense team, I have to say that Jose Baez was a pleasure to work with and did an herculean job in defending Casey Anthony.  Somehow he managed to juggle thousands of facts, dozens of experts and witnesses while under the intense scrutiny of the media and general public, http://feedproxy.google.com/~r/ExForensis/~3/jvqwHf50zkE/casey-anthony-verdict.htmlnoreply@blogger.com (Larry E. Daniel, DFCP, EnCE, BCE)4<img src="http://feeds.feedburner.com/~r/ExForensis/~4/jvqwHf50zkE" height="1" width="1"/>http://exforensis.blogspot.com/2011/07/casey-anthony-verdict.htmltag:blogger.com,1999:blog-8839981365154987340.post-612277063324036691Sun, 29 May 2011 23:52:00 +00002011-05-29T20:05:59.322-04:00RouterInternet ProtocolFilesharingWireless routerIP address Image via Wikipedia A Wired and Wireless Router I saw a post over on Technology Forensics, LLC's blog  on the topic of whether an IP (internet protocol) address from a wireless router should be enough to show probable cause to issue a warrant. I can kind if see where they are going, but whether or not a warrant is issued for any IP address is not really the issue.  Whether or not the wireless http://feedproxy.google.com/~r/ExForensis/~3/OcnKUm7XAsg/wireless-alone-is-not-probable-cause.htmlnoreply@blogger.com (Larry E. Daniel, DFCP, EnCE, BCE)6<img src="http://feeds.feedburner.com/~r/ExForensis/~4/OcnKUm7XAsg" height="1" width="1"/>http://exforensis.blogspot.com/2011/05/wireless-alone-is-not-probable-cause.htmltag:blogger.com,1999:blog-8839981365154987340.post-4603683912041629131Wed, 04 May 2011 15:05:00 +00002011-05-04T11:05:58.380-04:00Wireless networkWirelessWi-FiWireless routerIPadImage via WikipediaNearly everyone is going wireless these days.  It is just more convenient to have the ability to walk around the house with your iPad, use your laptop in a room where no cable connection exists, and is a lot cheaper than running network cable though the house or office. What amazes me is how many open hotspots there are still around.  With all the news about security issues, http://feedproxy.google.com/~r/ExForensis/~3/I7o0JR7icgI/false-porn-accusations-underscore-wi-fi.htmlnoreply@blogger.com (Larry E. Daniel, DFCP, EnCE, BCE)0<img src="http://feeds.feedburner.com/~r/ExForensis/~4/I7o0JR7icgI" height="1" width="1"/>http://exforensis.blogspot.com/2011/05/false-porn-accusations-underscore-wi-fi.htmltag:blogger.com,1999:blog-8839981365154987340.post-1811994750861146863Wed, 04 May 2011 12:59:00 +00002011-05-04T08:59:44.348-04:00cell phones and crimedeleted text messagesCell phone forensicsImage via WikipediaHolly Zachariah, a  reporter for The Columbus Dispatch filed this story on Sunday, May 1, 2011: Phone companies' ditching of text messages might hamper crime investigations And her is report is right on the money.  The value of text messages in criminal cases cannot be denied.  They can be critical on both sides of the case. The fact that the cellular carriers like Verizon,http://feedproxy.google.com/~r/ExForensis/~3/ZWnwaR2OKkY/phone-companies-ditching-of-text.htmlnoreply@blogger.com (Larry E. Daniel, DFCP, EnCE, BCE)0<img src="http://feeds.feedburner.com/~r/ExForensis/~4/ZWnwaR2OKkY" height="1" width="1"/>http://exforensis.blogspot.com/2011/05/phone-companies-ditching-of-text.htmltag:blogger.com,1999:blog-8839981365154987340.post-7677035161649624793Tue, 03 May 2011 09:11:00 +00002011-05-03T05:14:42.132-04:00SONY DATA BREACHIt has been in the news that SONY's Playstation network was breached in the last few days.  Their on-line gaming network has been breached as well. Here is the gist of the email. http://feedproxy.google.com/~r/ExForensis/~3/vvPb6LC9ad8/sony-on-line-entertainment-breach-woes.htmlnoreply@blogger.com (Larry E. Daniel, DFCP, EnCE, BCE)0<img src="http://feeds.feedburner.com/~r/ExForensis/~4/vvPb6LC9ad8" height="1" width="1"/>http://exforensis.blogspot.com/2011/05/sony-on-line-entertainment-breach-woes.htmltag:blogger.com,1999:blog-8839981365154987340.post-2630383258498113930Thu, 21 Apr 2011 01:13:00 +00002011-04-20T21:13:35.295-04:00SyngressAmazon.comBooksBN.comOver the last few months, Lars and I have been writing like crazy on our Syngress book, Digital Forensics for Legal Professionals.  While the book is still a few months away, you can order it now on Amazon! Permalink: http://amzn.com/159749643X http://feedproxy.google.com/~r/ExForensis/~3/rsbcG6Gaf60/book-is-almost-here.htmlnoreply@blogger.com (Larry E. Daniel, DFCP, EnCE, BCE)1<img src="http://feeds.feedburner.com/~r/ExForensis/~4/rsbcG6Gaf60" height="1" width="1"/>http://exforensis.blogspot.com/2011/04/book-is-almost-here.htmltag:blogger.com,1999:blog-8839981365154987340.post-8901865930548865802Tue, 01 Feb 2011 01:56:00 +00002011-01-31T20:59:31.172-05:00PI LicensingPrivate Investigator LicensingComputer ForeniscsTechnorati Tags: Private Investigator Laws,Virginia,Digital Forensics Licensing Image by MudflapDC via Flickr On January 31, 2011 the Virginia house voted 98 to 0 to pass House Bill HB 2271  to exempt Digital Forensics from the state Private Investigator law. Here is a summary: ”Computer and digital forensic services; exempt from regulation as a private security service business.  Exempts http://feedproxy.google.com/~r/ExForensis/~3/wSw-Rw3Ri9w/pi-law-updatevirginia-weighs-in.htmlnoreply@blogger.com (Larry E. Daniel, DFCP, EnCE, BCE)0<img src="http://feeds.feedburner.com/~r/ExForensis/~4/wSw-Rw3Ri9w" height="1" width="1"/>http://exforensis.blogspot.com/2011/01/pi-law-updatevirginia-weighs-in.htmltag:blogger.com,1999:blog-8839981365154987340.post-1206520087222873028Mon, 27 Dec 2010 19:28:00 +00002010-12-27T14:28:09.769-05:00  I have this application that I use and it is awesome.  DropBox.  DropBox is a cloud based (Internet) application that allows me and my team to share documents and access them virtually from anywhere.  I can review and edit these documents on my desktop, my laptop, my iPad, and review them on my Android phone.  Talk about convenience. What is so cool about the application is that it also http://feedproxy.google.com/~r/ExForensis/~3/AB1ygirx8Gk/electronic-discovery-just-keeps-getting.htmlnoreply@blogger.com (Larry E. Daniel, DFCP, EnCE, BCE)1<img src="http://feeds.feedburner.com/~r/ExForensis/~4/AB1ygirx8Gk" height="1" width="1"/>http://exforensis.blogspot.com/2010/12/electronic-discovery-just-keeps-getting.htmltag:blogger.com,1999:blog-8839981365154987340.post-1610511198016817220Sun, 05 Dec 2010 16:56:00 +00002010-12-05T11:56:29.265-05:00Now that the holidays are here, I thought it would be nice to put Drive Prophet on sale for the month of December.  Enter the coupon code holidays at the payment screen and receive 25% off the regular price of Drive Prophet. You can learn more about Drive Prophet at www.driveprophet.comhttp://feedproxy.google.com/~r/ExForensis/~3/yv-mgAT3mZ4/holiday-cheer-drive-prophet-sale.htmlnoreply@blogger.com (Larry E. Daniel, DFCP, EnCE, BCE)0<img src="http://feeds.feedburner.com/~r/ExForensis/~4/yv-mgAT3mZ4" height="1" width="1"/>http://exforensis.blogspot.com/2010/12/holiday-cheer-drive-prophet-sale.htmltag:blogger.com,1999:blog-8839981365154987340.post-5635434461209591926Sun, 14 Nov 2010 15:54:00 +00002010-11-14T10:55:18.059-05:00LimewireRecording Industry Association of AmericaGnutellaFilesharing Image via WikipediaI just read a very good article over at DFI News.  Frosted Limes- The Unintended Consequences of Shutting Down LimewireWhen I saw the part about Limewire not connecting for users, I had to go see what was happening.  I opened up Limewire on my test machine and sure enough, it would not connect. But…..It took me about five minutes to find the workaround to make it connect http://feedproxy.google.com/~r/ExForensis/~3/1nILeUevAmM/limewiredown-but-not-out.htmlnoreply@blogger.com (Larry E. Daniel, DFCP, EnCE, BCE)0<img src="http://feeds.feedburner.com/~r/ExForensis/~4/1nILeUevAmM" height="1" width="1"/>http://exforensis.blogspot.com/2010/11/limewiredown-but-not-out.htmltag:blogger.com,1999:blog-8839981365154987340.post-3096849192069598393Sun, 31 Oct 2010 17:22:00 +00002010-10-31T13:22:13.714-04:00Expert systemComputer ForensicsComputer Forensics ExpertsDigital ForensicsComputer Forensics Art and ScienceDigital Forensics ScienceDigital TriageExpert Systems Image via Wikipedia I just read a great post over at Eric J. Huber’s blog, A Fistful of Dongles: The Future of Digital Forensic Tools I would agree with everything Eric said.  However I would like to take it a bit further. Eric stopped his post at the third generation.  I have been thinking for quite some time about the Fourth Generation of digital forensics tools. When you have completed a http://feedproxy.google.com/~r/ExForensis/~3/8NEkkSBVEv8/future-of-digital-forensics-tools.htmlnoreply@blogger.com (Larry E. Daniel, DFCP, EnCE, BCE)1<img src="http://feeds.feedburner.com/~r/ExForensis/~4/8NEkkSBVEv8" height="1" width="1"/>http://exforensis.blogspot.com/2010/10/future-of-digital-forensics-tools.htmltag:blogger.com,1999:blog-8839981365154987340.post-2160965691817669729Thu, 28 Oct 2010 14:29:00 +00002010-10-28T11:04:56.567-04:00P2P File SharingKazaaP2PLimewire Image via WikipediaIn a recent court ruling, Limewire has been forced to close its website.  While Limewire made for a really huge target for music company lawsuits, just like Napster was in the past, the injunction missed the real target.I just fired up Limewire on one of my test computers, and as suspected, it works just like always.  The only difference is the legal notice that pops up when http://feedproxy.google.com/~r/ExForensis/~3/qo3av9bvSy0/limewire-forced-to-close-is-it-end-of.htmlnoreply@blogger.com (Larry E. Daniel, DFCP, EnCE, BCE)0<img src="http://feeds.feedburner.com/~r/ExForensis/~4/qo3av9bvSy0" height="1" width="1"/>http://exforensis.blogspot.com/2010/10/limewire-forced-to-close-is-it-end-of.htmltag:blogger.com,1999:blog-8839981365154987340.post-9031803196963393785Sun, 15 Aug 2010 12:29:00 +00002010-10-30T19:07:57.583-04:00Unverified SenderChildrenCell Phone SafetyCell phone forensicscell phone featurescell phones Image via WikipediaWhat many see as nice features and services, those who are a bit more security conscious see the potential for harm. One such service is called spoofing.  This allows you to call someone using a completely fake phone number or any phone number you choose, and mask your identity even including faking your voice. While this can be a useful service for those who need to mask http://feedproxy.google.com/~r/ExForensis/~3/DCskSjzH2VY/spoofing-calls-and-texts-dangerous-side.htmlnoreply@blogger.com (Larry E. Daniel, DFCP, EnCE, BCE)0<img src="http://feeds.feedburner.com/~r/ExForensis/~4/DCskSjzH2VY" height="1" width="1"/>http://exforensis.blogspot.com/2010/08/spoofing-calls-and-texts-dangerous-side.htmltag:blogger.com,1999:blog-8839981365154987340.post-3248154096889043583Tue, 10 Aug 2010 12:44:00 +00002010-08-10T08:44:08.568-04:00Browser CachingInternet safetyInternet CachingInternet CacheTechnorati Tags: Private Browsing,Incognito Mode,Internet History Image by Vurter via Flickr In an article published this morning over at ZDNet, by Tom Espiner, it appears that clicking on that Private Browsing mode in your Internet Explorer, Firefox, Google Chrome or Safari may not be all that private after all.  ”The private browsing features in Internet Explorer, Firefox, Chrome and Safari http://feedproxy.google.com/~r/ExForensis/~3/6S0G9sf0KDo/private-browsing-not-so-private-after.htmlnoreply@blogger.com (Larry E. Daniel, DFCP, EnCE, BCE)0<img src="http://feeds.feedburner.com/~r/ExForensis/~4/6S0G9sf0KDo" height="1" width="1"/>http://exforensis.blogspot.com/2010/08/private-browsing-not-so-private-after.htmltag:blogger.com,1999:blog-8839981365154987340.post-3198276943086044890Tue, 03 Aug 2010 03:18:00 +00002010-08-02T23:18:28.953-04:00Computer RepairData Loss PreventionComputer securityBuyer BewareBusinessComputer Support Image by Bohman via Flickr I get calls from folks asking me about people getting into their networks when they have recently purchased a business from someone else, or when an employee has recently left, willingly or otherwise. In larger businesses that have in house IT support, they probably have the IT people take care of this.  But in smaller businesses that do not have internal IT support http://feedproxy.google.com/~r/ExForensis/~3/l8RhweewqZY/buying-business-change-all-keys-not.htmlnoreply@blogger.com (Larry E. Daniel, DFCP, EnCE, BCE)0<img src="http://feeds.feedburner.com/~r/ExForensis/~4/l8RhweewqZY" height="1" width="1"/>http://exforensis.blogspot.com/2010/08/buying-business-change-all-keys-not.htmltag:blogger.com,1999:blog-8839981365154987340.post-2728811209987384600Thu, 22 Jul 2010 15:48:00 +00002010-07-23T19:18:30.200-04:00courtroom presentationswrite blockerInternet CachingGiven the number of downloads we have had of the images I posted in the post “A Picture is Worth A Thousand Words,” I’d say their popularity exceeded my expectations. I was organizing my files today and came across some more images I have made for my own presentations and for use in court. I post these images in high quality because I want to share them with the community. So feel free to http://feedproxy.google.com/~r/ExForensis/~3/Fv6AC0gZ3cE/picture-is-worth-thousand-words-part-2.htmlnoreply@blogger.com (Lars Daniel, EnCE)0<img src="http://feeds.feedburner.com/~r/ExForensis/~4/Fv6AC0gZ3cE" height="1" width="1"/>http://exforensis.blogspot.com/2010/07/picture-is-worth-thousand-words-part-2.htmltag:blogger.com,1999:blog-8839981365154987340.post-8216960676404303706Wed, 07 Jul 2010 15:11:00 +00002010-07-07T11:11:43.471-04:00Andy SpruillCEIC 2010Larry DanielLynita HinschExpert Witness Image via WikipediaLast week I testified as an expert witness for the first time.  While I was confident in my ability to testify to what I had done in the case, it was still a bit of a nerve wracking experience.  It was definitely intimidating to ponder upon the fact that what I said on the stand that day would go into public record and exist forever. Luckily I have been able to learn a http://feedproxy.google.com/~r/ExForensis/~3/TVa3GAzcOGA/into-breach-expert-witness-testimony.htmlnoreply@blogger.com (Lars Daniel, EnCE)1<img src="http://feeds.feedburner.com/~r/ExForensis/~4/TVa3GAzcOGA" height="1" width="1"/>http://exforensis.blogspot.com/2010/07/into-breach-expert-witness-testimony.htmltag:blogger.com,1999:blog-8839981365154987340.post-7499319502150868344Fri, 02 Jul 2010 12:19:00 +00002010-08-05T15:19:00.477-04:00Open sourceExpert WitnessLawImage by Myles! via FlickrI was reading some blogs this morning and happened onto a post by Susan Brenner, on her cyb3rcrim3 blog. (Not sure why a law prof uses leet speak for her blog title, lol.) The title of the post was Ghost v. EnCase, so naturally I had to read it. Here are a couple of relevant clips from the post.  I encourage you to read the whole post as it presents a real issue with http://feedproxy.google.com/~r/ExForensis/~3/Eu1Uwvi4A1s/forensic-file-formats-primer-for.htmlnoreply@blogger.com (Larry E. Daniel, DFCP, EnCE, BCE)3<img src="http://feeds.feedburner.com/~r/ExForensis/~4/Eu1Uwvi4A1s" height="1" width="1"/>http://exforensis.blogspot.com/2010/07/forensic-file-formats-primer-for.htmltag:blogger.com,1999:blog-8839981365154987340.post-4749594440340519261Thu, 01 Jul 2010 13:26:00 +00002010-07-01T09:26:19.220-04:00Data Loss PreventionPacket (information technology)Network monitoringImage via WikipediaIf you have read my posts over time, you know that I like things to be simple to understand.  There is an elegance in simplicity and it is much harder to achieve than straight complexity. Data leakage protection, network monitoring, employee compliance are all issues faced by every entity, private or government who is connected to the Internet.  That pretty much includes http://feedproxy.google.com/~r/ExForensis/~3/bF0Mags0mho/network-packet-forensics-made-simple.htmlnoreply@blogger.com (Larry E. Daniel, DFCP, EnCE, BCE)0<img src="http://feeds.feedburner.com/~r/ExForensis/~4/bF0Mags0mho" height="1" width="1"/>http://exforensis.blogspot.com/2010/07/network-packet-forensics-made-simple.htmltag:blogger.com,1999:blog-8839981365154987340.post-2043779104006894960Tue, 29 Jun 2010 16:02:00 +00002010-06-29T12:12:29.545-04:00LearningKnowledgeImage via WikipediaI have a background in philosophy. My undergraduate degree was in philosophy, and I credit much of my success in digital forensics to the study of this discipline.I am not proposing that an understanding of existentialism or Platonism is particularly useful in digital forensics. However, what I learned in the study of philosophy, at its root, is not the knowledge of different http://feedproxy.google.com/~r/ExForensis/~3/oBWMeHUguAM/adopting-philosophy-of-learning.htmlnoreply@blogger.com (Lars Daniel, EnCE)0<img src="http://feeds.feedburner.com/~r/ExForensis/~4/oBWMeHUguAM" height="1" width="1"/>http://exforensis.blogspot.com/2010/06/adopting-philosophy-of-learning.htmltag:blogger.com,1999:blog-8839981365154987340.post-106329867418147637Sun, 27 Jun 2010 12:28:00 +00002010-06-27T08:32:47.845-04:00FacebookEncryptionComputer securityComputer ForensicsDigital ForensicsCell phone forensicsComputer Forensics ExpertImage via Wikipedia Normally I leave it to the pundits over at PC World and other consumer type computer magazines to do their predictions of what will happen to the industry over the next ten years.  But what the heck, I can guess as good as anyone. So, after consulting my Magic Eight Ball, here we go. 1. Encryption will become the norm rather than the exception, driving live memory forensicsAs http://feedproxy.google.com/~r/ExForensis/~3/HNwQQ3o2kLE/computer-forensics-next-ten-years.htmlnoreply@blogger.com (Larry E. Daniel, DFCP, EnCE, BCE)2<img src="http://feeds.feedburner.com/~r/ExForensis/~4/HNwQQ3o2kLE" height="1" width="1"/>http://exforensis.blogspot.com/2010/06/computer-forensics-next-ten-years.html