the regional computer forensics lab system - dfrws · the regional computer forensics lab system by...

DIGITAL FORENSIC RESEARCH CONFERENCE The Regional Computer Forensics Lab System By Sean O'Brien Presented At The Digital Forensic Research Conference DFRWS 2014 USA Denver, CO (Aug 3 rd - 6 th ) DFRWS is dedicated to the sharing of knowledge and ideas about digital forensics research. Ever since it organized the first open workshop devoted to digital forensics in 2001, DFRWS continues to bring academics and practitioners together in an informal environment. As a non-profit, volunteer organization, DFRWS sponsors technical working groups, annual conferences and challenges to help drive the direction of research and development. http:/dfrws.org

Upload: truongduong

Post on 14-Apr-2019

226 views

Category:

Documents

0 download

Report

Download

Embed Size (px):

TRANSCRIPT

DIGITAL FORENSIC RESEARCH CONFERENCE

The Regional Computer Forensics Lab System

Sean O'Brien

Presented At

The Digital Forensic Research Conference

DFRWS 2014 USA Denver, CO (Aug 3rd - 6th)

DFRWS is dedicated to the sharing of knowledge and ideas about digital forensics research. Ever since it organized

the first open workshop devoted to digital forensics in 2001, DFRWS continues to bring academics and practitioners

together in an informal environment. As a non-profit, volunteer organization, DFRWS sponsors technical working

groups, annual conferences and challenges to help drive the direction of research and development.

http:/dfrws.org

Page 2: The Regional Computer Forensics Lab System - dfrws · The Regional Computer Forensics Lab System By Sean O'Brien Presented At The Digital Forensic Research Conference DFRWS 2014 USA

Digital'Forensics''

A'Law'Enforcement'Perspec7ve'

Squad'I>5''–''FBI'Denver'Division'

August'5,'2014'

SSA'Sean'K.'O’Brien'

Laboratory'Director'

Page 3: The Regional Computer Forensics Lab System - dfrws · The Regional Computer Forensics Lab System By Sean O'Brien Presented At The Digital Forensic Research Conference DFRWS 2014 USA

Mission'='Service'

The'Rocky'Mountain'RCFL'is'a'one'stop,'full'service'forensics'laboratory'and'

training'center'devoted'en7rely'to'the'examina7on'of'digital'evidence'in'

support'of'criminal'and'na7onal'security'inves7ga7ons'such'as:''

• Terrorism/Counter'Intelligence'

• Violent'Crime'

• Computer'Intrusions'

• Child'Exploita7on'• Violent'Crimes'

• Property'Crimes'

• Financial'Crime'

• Training'–'other'law'enforcement'agencies'

• On>site'imaging'

• Most'things'digital'

• Expert'witness'tes7mony'

Page 4: The Regional Computer Forensics Lab System - dfrws · The Regional Computer Forensics Lab System By Sean O'Brien Presented At The Digital Forensic Research Conference DFRWS 2014 USA

''''''''The'FBI'Story'–'Digital'Evolu7on'

Page 5: The Regional Computer Forensics Lab System - dfrws · The Regional Computer Forensics Lab System By Sean O'Brien Presented At The Digital Forensic Research Conference DFRWS 2014 USA

ASCLD/LAB'Accredita7on'

ISO'17025:2005'

! 'Standard'Opera7ng'Procedures'(SOP)'

! 'Quality'Assurance'Policy'

! '100%'Technical/Administra7ve'Review'

! Expert'Witness'

Page 6: The Regional Computer Forensics Lab System - dfrws · The Regional Computer Forensics Lab System By Sean O'Brien Presented At The Digital Forensic Research Conference DFRWS 2014 USA

Par7cipa7ng'Agencies'

•  18th'Judicial'District'DA’s'Office'

•  Adams'County'Sheriff’s'Office'

•  Arvada'Police'Department'

•  Aurora'Police'Department'

•  Colorado'Bureau'of'Inves7ga7on'

•  Commerce'City'Police'Department'

•  Denver'District'Aborney’s'Office'

•  Denver'Police'Department'

•  Douglas'County'Sheriff’s'Office'

•  Federal'Bureau'of'Inves7ga7on'

•  Jefferson'County'Sheriff’s'Office'

•  Lakewood'Police'Department'

•  Libleton'Police'Department'

•  Thornton'Police'Department'

Page 7: The Regional Computer Forensics Lab System - dfrws · The Regional Computer Forensics Lab System By Sean O'Brien Presented At The Digital Forensic Research Conference DFRWS 2014 USA

FE'Special7es'

•  Windows'–'AD'Lab'

•  Mac''

•  UNIX'/'Linux'•  Cell'Phone/Tablet/Camera'

•  EnCase'

Page 8: The Regional Computer Forensics Lab System - dfrws · The Regional Computer Forensics Lab System By Sean O'Brien Presented At The Digital Forensic Research Conference DFRWS 2014 USA

Cases'by'Classifica7on'

ICAC 47%

Violent Crime 23%

White Collar 17%

Page 9: The Regional Computer Forensics Lab System - dfrws · The Regional Computer Forensics Lab System By Sean O'Brien Presented At The Digital Forensic Research Conference DFRWS 2014 USA

'''''Portable'Device'Triage'Strategy'

Page 10: The Regional Computer Forensics Lab System - dfrws · The Regional Computer Forensics Lab System By Sean O'Brien Presented At The Digital Forensic Research Conference DFRWS 2014 USA

Notable'Cases'

2009 - Najibullah Zazi, a Colorado resident arrested in a planned terrorist attack on New York City Subways.

2014 Dotson - Denver man sentenced for raping woman he also allegedly tried to kill from jail.

Page 11: The Regional Computer Forensics Lab System - dfrws · The Regional Computer Forensics Lab System By Sean O'Brien Presented At The Digital Forensic Research Conference DFRWS 2014 USA

Notable'Cases'

2011 - Marc O'Leary Pled guilty – 327 years.

2012 – Austin Sigg Pled guilty – Life + 86 Years

Page 12: The Regional Computer Forensics Lab System - dfrws · The Regional Computer Forensics Lab System By Sean O'Brien Presented At The Digital Forensic Research Conference DFRWS 2014 USA

Ques7ons?'

Rocky Mountain RCFL 9195 E. Mineral Ave

Centennial, CO 80112 303-649-7900

www.rmrcfl.org [email protected]

IoT Forensics Challenges and Opportunities for Digital Traces · IoT Forensics Challenges and Opportunities for Digital Traces 26.04.19 DFRWS Europe 2019 1 Francesco Servida, Eoghan

the Wildlife Forensics Lab - Towson University · the . Wildlife Forensics Lab . A Biotechnology Application for Protecting . an Endangered Species . ... and global climate change

DIGITAL FORENSIC RESEARCH CONFERENCE · DFRWS is dedicated to the sharing of knowledge and ideas about digital forensics research. Ever since it organized the first open workshop

DIGITAL FORENSICS - Auckland€¦ · - Digital Forensic Research Workshop (DFRWS) Top right corner for field customer or partner logotypes. See Best ... Computer forensics Network

Digital Forensics for IaaS Cloud Computing · PDF fileCyber Defense Lab Digital Forensics for IaaS Cloud Computing Josiah Dykstra June 26, 2012

Digital Forensics - Paviavision.unipv.it/.../lucidi/DigitalForensicsIntro.pdf · 2015-05-21 · 1 Antonio Barili – Digital Forensics Lab Dept. of Industrial and Information Engineering

Digital Evidence Dashboard - dfrws.org · Digital Evidence Dashboard The organisation of digital forensics in investigations Hans Henseler* and Adrie Stander** DFRWS EU 2016, March

miniPR™ Forensics Lab: Analysis of the D1S80 VNTR · miniPR™ Forensics Lab: Analysis of the D1S80 VNTR ... • DNA extraction ... structure of proteins which carry out the essential

DFRWS Forensics Challenge 2016 - CMAND · PDF fileDFRWS Forensics Challenge 2016 Robert Beverly, Brian Greunke, ... 2014 Mobile Malware 2013 Block Classifier 2012 Block Classifier

IoT Forensics Challenges and Opportunities for Digital Traces · 2019-05-30 · IoT Forensics Challenges and Opportunities for Digital Traces 26.04.19 DFRWS Europe 2019 1 Francesco

LIFE ON CLOUDS, A FORENSICS OVERVIEW - dfrws · LIFE ON CLOUDS, A FORENSICS OVERVIEW MARCO SCARITO – MATTIA EPIFANI – FRANCESCO PICASSO DFRWS 2016 EU – LAUSANNE 31/03/2016

An Analysis of Ext4 for Digital Forensics - dfrws...DIGITAL FORENSIC RESEARCH CONFERENCE An Analysis of Ext4 for Digital Forensics By Kevin Fairbanks Presented At The Digital Forensic

Memory Forensics and the Windows Subsystem for Linux€¦ · Windows Subsystem for Linux Nathan Lewis, Andrew Case, Aisha Ali-Gombe, Golden Richard III DFRWS USA 2018. Bio •Software

Forensics Lab Excercises at

ASCLD / LAB Inspection Report of Virginia Forensics Laboratory

the Wildlife Forensics Lab

Biological Forensics. Forensics Lab Objectives Learn the definition of forensic science. Examine ways biological information can be used to solve crimes,

Damaged Device Forensics - DFRWS · Damaged Device Forensics. Acknowledgement & Disclaimer ... •Devices are far more resilient than most agencies realize. •Temperatures so far

Memory Forensics with Hyper-V Virtual Machines - DFRWS · Memory Forensics with Hyper-V Virtual Machines By ... Memory Forensics with Hyper-V Virtual Machines By: ... //media.blackhat.com/bh-dc-11/Suiche/BlackHat_DC_2011

Forensic Network Analysis Tools - DFRWS

ValidatingMobile Forensics Tools in Your Lab with NIST

Computer Forensics Infosec Pro Guide Ch 3 Creating a Lab

Drone Forensics - dfrws · 2019-05-30 · Digital Forensic Techniques Logical and physical acquisitions attempted against every drone. 1. Logical acquisitions of file systems 2. Physical

Robust bootstrapping memory analysis against anti-forensics · 2019-05-30 · DFRWS USA 2016 d Proceedings of the 16th Annual USA Digital Forensics Research Conference Robust bootstrapping

DIGITAL FORENSIC RESEARCH CONFERENCE - · PDF fileThe Digital Forensic Research Conference ... DFRWS is dedicated to the sharing of knowledge and ideas about digital forensics research

Digital Investigation - DFRWS

Windows Surface RT Tablet Forensics - Home - DFRWS · 2019-05-30 · •Favorite the page slashdot.org Internet Explorer (Desktop) •Browsed to google.com •Browsed to microsoft.com

DEPARTMENT OF FORENSIC SCIENCE · Forensic Anthropology Lab 3. Forensic Medicine 4. Forensic Medicine Lab Discipline Specific Elective 5. Digital Forensics 6. Digital Forensics Lab

Forensics Lab Brennan Coffey Logan Ernst Zach Salinas Fergus Sharp

Dfrws eu 2014 rekall workshop

Research Project 2 DFRWS Challenge 2010 - Mobile forensics · for researchers, forensic examiners, and analysts[1]. As of 2005 they have added a forensic challenge with the goal to

Honeynets and Digital Forensics - DFRWS...Honeynets and Digital Forensics By Lance Spitzner Presented At The Digital Forensic Research Conference DFRWS 2004 USA Baltimore, MD (Aug

SHOTS 2008 Advisor: Dr. Dinitra White Forensics Lab Tierra Simmons Arielle Thomas

Computer Forensics Lab 3 - Transtutors · Web viewComputer Forensics by Scott Hancock Scott Hancock [email protected] Windows EnCase Forensics Lab Due date: Please submit your work

Digital Forensics as a Service - DFRWS€¦ · Digital Forensics as a Service (since Q4 2010) XIRAF / Hansken > 600 cases > 10,000 devices > 1.5 PB data > 2,500 investigators . all