Blog

In this week's edition of Case Leads we see Cellebrite and Forensic Focus getting updates, Dave Hull's blog post on EXIF data & Bing Maps, as well as a major court decision regarding the U.S. 5th Amendment and more.

If you have an item you'd like to contribute toDigital Forensics CaseLeads, please send it to caseleads@sans.org

Tools:

• Cellebrite UFED version 1.1.9.3 has been released. It now Supports the extraction of iMessages from iOS devices running i0S5.x from a logical extraction, 10 newly supported BlackBerry devices for physical extraction & decoding and 38 new Android devices supported for physical extraction & 85 supported for file system extraction. Read the release notes here.
• Harlan Carvey recently helped a friend to parse Facebook Chats to CSV format by putting together a Perl script, fb.pl.
• ViaForensics released a bunch of Android YAFFS2 images with details on what data was populated as well as deleted. Here is an overview and links to the 10 images

Good Reads:

• Dave Hull has a neat post up on his Trusted Signal blog regarding plotting photo location data using the SANS SIFT, a python script he put together and features within Bing maps.
• Here is a how to posted on the Redmond Pie blog on getting Android 4.0 running in VirtualBox on Windows, Mac and Linux (Thanks to Danny Garcia for sharing the link).

Links:

• Andreas Schuster has set up a Scoop.it publication for DFIR news.
• Mike Wilkinson has posted the recordings from the February 16, 2012 DFIR Online meetup featuring Jon Rajewski, Peter Coons & John Clingerman over on his WriteBlocked.org site.

News:

• Federal appeals court decides that forced decryption goes against the 5th Amendment right protecting self-incrimination. Here is a copy of the decision from EFF's site

Levity:

• In addition to a visual update to the site, this video was the winner in the Forensic Focus "What is it like being a digital forensics investigator?" competition.
• Hey The Big Bang Theory fans, Leonard Nimoy will be doing a guest voiceover on the show

Coming Events:

• SANS Secure Singapore 2012-Singapore, Singapore -March 05 - 17, 2012
• Mobile Device Security Summit- Nashville, TN -March 12 - 15, 2012
• 12th Annual CanSecWest Conference-Vancouver, British Columbia, Canada - March 9 - 11, 2012
• SANS 2012-Orlando, Florida -March 23 - 30, 2012
• Euro Forensic 2012-Istanbul, Turkey - March 29 - 31, 2012
• SANS Northern Virginia 2012, Reston, VA - April 15 - 20, 2012 -
• 5th USENIX Workshop on Large-Scale Exploits and Emergent Threats (LEET '12) - San Jose, CA - April 24th, 2012
• SANS Cyber Guardian 2012 - Baltimore, MD - April 30 - May 7, 2012
• SANS AppSec 2012: Summit & Training-Las Vegas, NV - April 24 - May 2, 2012
• 7th ACM Symposium on Information, Computer and Communications Security - Seoul, South Korea - May 1 - 3, 2012
• SANS Security West 2012 - San Diego, CA - May 10 - 18, 2012
• 14th Information Hiding Conference - Berleley, CA - May 15 - 18, 2012
• IEEE Symposium on Security & Privacy - San Francisco, CA - May 20 - 23, 2012
• Computer Enterprise and Investigation Conference - Summerlin, NV - May 21 - 24, 2012
• 2012 ADFSL Conference on Digital Forensics, Security and Law - Richmond, VA - May 30 - 31, 2012

• ARES Conference- Due Date - Mar 01, 2012
• Symposium On Usable Privacy and Security- Due Date - Mar 09, 2012
• European Symposium on Research in Computer Security (ESORICS) 2012- Due Date - Mar 31, 2012