- AI-Assisted. Human-Led. Why DFIR Needed Its Own AI Frameworks. (8/27/2026) - If we have crossed paths at a summit, in a classroom, or in an email thread over the past year, there is a good chance you asked me some version of the same question: can I actually use AI in my investigations, and if I do, will my findings hold up? Do we think AI … Continue reading AI-Assisted. Human-Led. Why DFIR Needed Its Own AI Frameworks. →
- The Idaho Murders: Remembering Kaylee, Xana, Maddie, and Ethan (8/10/2026) - Now that Netflix has aired, the questions and media requests are flowing in. Here are the ones I hear most: 1. Why did we get this case?2. Did we find his motive?3. Will we be called back again if he gets a trial?4. Did Netflix pay us, and how much did we make on the … Continue reading The Idaho Murders: Remembering Kaylee, Xana, Maddie, and Ethan →
- iOS 17- The “Forever” Setting That Isn’t… Or Is It? (8/7/2024) - When I teach SANS FOR585 Smartphone Forensic Analysis In-Depth, we really dive into iOS artifacts to validate the truth of what happened, what tools are reporting, and what they are missing. Message retention is often needed to help examiners understand why data no longer exists on the iOS device if the user didn’t delete it. … Continue reading iOS 17- The “Forever” Setting That Isn’t… Or Is It? →
- Android and iOS acquisition Recommendations (12/30/2021) - I have been meaning to update this blog for years, so here goes. This blog is going to cover what I recommend to get the most data from iOS and Android devices. Many tools exist to successfully extract data from mobile devices and I am sharing some of my favorite methods that have proven to … Continue reading Android and iOS acquisition Recommendations →
- Forensic 4:Cast Awards – nominations are open (3/17/2021) - It’s that time of year again – the Forensic 4:Cast awards season and nominations are open. Last year I won 4 awards and my team won an additional 2! It was mind blowing and humbling. Thank you again if you voted for me. I have taken the time to think over the last two weeks … Continue reading Forensic 4:Cast Awards – nominations are open →
It's time to get SMARTER!