This episode of CyberSpeak we conduct recon on Mark Spencer and his new Windows registry analysis tool Registry Recon.  Mark is the President of Arsenal Consulting.  This new registry tool could change the way we analyze the Windows registry.  No longer will you be satisfied just looking st the current/active registry.   

Happy 2013!  I'm back and going to try to start getting some more shows out for you. This show we talk to James Wiebe, Director of Foensic Business Devleopment at WiebeTech about solid state hard drives, his research and the forensic implications. Email me at cyberspeak at gmail dot com if you have some suggestions for future show topics you want to hear.

This episode we discuss running AV and malware detection software on your forensic workstation and have an interview with Corey Harrell and discuss analyzing Volume Shadow Copies.  

This special episode of CyberSpeak is an interview with Ken Privette with NUIX about their new tool release this morning called Proof Finder.  They are releasing 1,000 copies for $100 each of this new tool. Go get a copy before they are all gone at www.prooffinder.com. This special limited edition tool is limited to 10G of data. What does 10G of data look like, Nuix says it is an average of 241,165 Emails or 20333 Documents or 7069 Spreadsheets or 25514 Images. It can ingest all major forensic images (E01, DD, etc)

Listen to the show for more details.  100% of all sales go to charity "Room to Read", an organization that works in collaboration with communities and local governments in developing countries to develop literacy skills and a habit of reading among primary school children, and support girls to complete secondary school with the life skills they’ll need to succeed in school and beyond.

ALERT-Download and install on the computer you want it registered to.  Initial installation will lock it to that computer.

This week on CyberSpeak I interview Andrew Case, one of the developers of Registry Decoder, a National Institute of Justice sponsored application. Find it at www.registrydecoder.com

This week on CyberSpeak, a quick thanks to everyone for pitching in on the ForensicsWiki - I saw over 100 new entries on everything from Sticky notes, mounting images, jump lists to people's BIOS.  Jim Emailed asking who the mystery voice was in out CyberSpeak Sweepers - Karl over from CyberCon Security Solutions said wrote in to say he just ran across this site today and thought it might be a great resource for the listeners.  It is not focused on Cyber Security but the concepts are the similar to help prepare for trial.  LAW 101: LEGAL GUIDE FOR THE FORENSIC EXPERT. Shout out to Charles.  Finally, Loren Wrote in and said during the interview, Keith Jones mentioned preparing for court by asking others for their opinions. Are there any ramifications of bringing others into the case like that? 

In the News, Google, The Company with the motto - DO NO EVIL - agreed to forfeit $500 million to the U.S. Government for allowing -- and assisting in many case -- online Canadian pharmacies to place AdWords ads targeting customers in the United States resulting in the unlawful importation of controlled and non-controlled prescription drugs into the United States.  

This weeks interview is with Chris Pogue, Mr. Sniper Forensics!

Thanks to Dan Website of the week is Workflowy https://workflowy.com/ 

CYBERSPEAK Notes - Aug 21st, 2011

Administrative

I attended a nice Apple Forensic Event this week in Reston VA - Saw a lot of friends and had a good time.  Ryan gave a great presentation on Apple forensics.  Ryan runs the AppleExaminer.com 

Paraben's Forensic Innovation Conference 

PFIC is fast approaching and you know, it's becoming one of the the must attend conference each year for digital forensic and eDiscovery professionals. This year, there are seven pre-conference bootcamps that are included in your conference registration fee of $399.00. You can attend any single bootcamp and then the rest of the conference tracks and labs for this rate.  This is all being brought to you by our friends over at the Paraben Corporation (Amber Schroader). 

You can register by heading over to pfic-conference.com

http://www.forensicswiki.org - We all should go check this site out, sign up for an account and start contributing.  This is the way we can all give back to the community.  Write a How-To or something to give back to the forensic community. 

Listener Email -

Richardo from Navada Concerned about those performing collateral duty of doing digital forensic examinations.  Frustrated to read article after article in digital forensic publications that cover the deconstruction of a complicated piece of malware. he would rather have articles that rehashed digital forensic basics and covered free automated/low cost tools that help me do my job efficiently and reliably.

News-

London Police are using Flicker to allow the public to help identify people involved in the looting following riots in London. 

http://www.flickr.com/photos/metropolitanpolice/sets/72157627267892973/

http://thenextweb.com/uk/2011/08/09/police-use-flickr-to-identify-london-riot-suspects/

INTERVIEW -

Welcome back to the show Drew Fahey, VP of Products at Blackbag Technologies. 

Web Sites of the Week-

http://www.forensicswiki.org

http://t.co/vEmtzCA - A guide to FaceBook Security

KEEP THE EMAILS COMING to CyberSpeak@gmail.com

This week on CyberSpeak, Luby and Jared Save the GMail Planet, Detective Garcia uncovers Fraud on Sesame Street.  Congrats to the Secret Service and FBI on a great investigation of a 26 year old Brooklyn man who plead guilty in U.S. District Court in Alexandria, VA for his role in managing a credit card fraud operation that operated throughout the East Coast of the United States. California Prosecutors will not file charges against Gizmodo for its purchase of an iPhone 4 prototype (boo).  Interview this week is Keith Jones, Co-Owner and Senior Partner at Jones Dykstra and Associates Inc., about the do's and don'ts of testifying.  Tech topic, MoonSol's Dumpit released for FREE.  Perfect for imaging RAM on 32 or 64 bit Windows System.  It just does not get any easier than this-Check it out.  Web pick of the week is http://Infosecupdate.com. KEEP THE EMAILS COMING!

Chris Hanesn caught cheating...on his mistress Launch of the CDFS www.cdfs.org, DFirst starts this week and more.