Murphy's Law of Digital Forensics

I love digital forensics – the art and the science of it; the stories, challenges and puzzles surrounding it. In this field, nothing is impossible – there are just really difficult problems waiting for novel solutions. This blog is where I’ll share my experiences, thoughts, and ideas about our profession and how the Gillware Digital Forensics team approaches them.

May 9, 2017
The computers our laptop forensics experts see can be very well-traveled. This one had taken a trip to Belize and came back suspiciously different...

Adventures in Laptop Forensics

“Would you tell me, please, which way I ought to go from here?” “That depends a good deal on where you want to get to.” “I […]
February 21, 2017
Virtual machine forensics is like opening up a Matryoshka doll--There's always more inside.

Forensic Case Files: Virtual Machine Matryoshka

“Keep thinking. You can hear our brains rattling around inside us, like the littler Russian dolls.” – M. T. Anderson In this case study, we got […]
January 31, 2017
The chip successfully removed from the HTC One logic board (again, circled in red)

Forensic Case Files: HTC One Mobile Chip-Off Forensics

“The number of American troops killed in Afghanistan and Iraq between 2001 and 2012 was 6,488. The number of American women who were murdered by current […]
January 23, 2017

Digital Forensics as Art and Science

“To develop a complete mind: Study the science of art; Study the art of science. Learn how to see. Realize that everything connects to everything else.” […]
November 17, 2016

Employee Misconduct and Digital Forensics

If I had eight hours to chop down a tree, I’d spend six sharpening my ax. – Abraham Lincoln Technology and Work Time The average American […]
August 22, 2016

Moving forward, looking back

I’m convinced that about half of what separates successful entrepreneurs from the non-successful ones is pure perseverance. – Steve Jobs Retirement? Friday, August 12th, 2016 was […]
August 9, 2016

Can Pokémon GO Users’ Movements be Determined Using Forensic Artifacts?

“Will you help me with my research?” – Professor Willow In my blog post on Pokemon GO, I discussed some early observations about forensic artifacts stored […]
July 18, 2016

Oh, No – Pokémon Go! A Sneak Peek at Forensic Artifacts

A Sneak Peek at Pokémon Go Application Forensics UPDATED 7/22/16 – Thanks to Warren Raquel (@warquel) a Senior Security Engineer at the National Center for Supercomputing Applications, Android location information […]
June 22, 2016

Flash Memory Amnesia – Resurrecting Data through Direct Read of NAND Memory

“Anything that can go wrong, will go wrong.” That’s Murphy’s Law. How we deal with the fallout afterwards is what determines whether Murphy’s Law works for […]