DFIRonline Crypto Presentation Reflection

First off, I want to thank Mike Wilkinson for asking me to present at the February 2012 DFIROnline videocast. The presentation topic was “A hands on (pen/paper) exercise in basic cryptology and cryptanalysis”. We had about 45 people in attendance. The session was interactive and my goal was to really help people appreciate the art of manual ciphertext decryption. Kryptos – Discussed in …

"Wait, I just found my password"

In today’s Digital Forensic Tool Evaluation class we were using FTK Imager. I walked the class through the fundamentals and then through some of advanced features. I was very happy with the questions I was getting – this really shows that the students were “getting it”. That said I wanted to share a fun story from class – When I …

DFIROnline – Rajewski is presenting on Crypto

I’m going to be giving a talk on basic cryptology/cryptanalysis on February 16, 2012. Here is a link to the event. Some expectations that I want to set – 1) I’m not a mathematician and I won’t melt your brain2) You will need a pen and paper3) We will be focusing on historical cryptology4) We will be breaking cyphers by …

Google search results going secure, what does this mean for forensics?

If you run a search on Google.com, your Internet search is likely recorded and logged in several places. Digital forensic examiners leverage this feature in digital forensic exams. Investigators can serve Google with the appropriate legal paperwork to determine a specific users searches while they were logged into Google. The latter is hard to obtain and the former is a standard …