Digital Forensics In-Depth

Watch Now

This presentation provides a look at digital forensics capabilities in-depth, with perspectives from several of Avansic’s experts. It begins with an overview of the types of devices that can be collected (including cell phones) and the types of devices we recommend collecting during an investigation. The presenters then discuss metadata and clear up confusion regarding created, modified, and accessed dates. Data carving is defined and examples are given of what can be recovered; this includes a discussion of retrieving deleted information from cell phones and the role of backup and syncing in that instance.