Forensic Science and Technology Commons^™

Behavioral Assessment Ai Software: Enhancing Polygraph And Investigative Interviewing, Alan Saquella

Publications

In the rapidly evolving world of security, law enforcement, and investigative sciences, professionals are increasingly turning to advanced technologies to supplement tried-and-true methodologies. One emerging innovation is behavioral assessment software, designed to enhance both preemployment screening and investigative interviewing. Acting as a form of modern human intelligence collection, these tools enable examiners and investigators to gather deeper insights directly from candidates and subjects, revealing behavioral cues and risk indicators that might otherwise remain hidden (Vrij, 2008).

Advancements In Technology Empower Loss Prevention Professionals In Security Investigations, Alan Saquella

Publications

In recent years, the field of security investigations has witnessed a profound transformation, owing to the rapid integration of technology. Loss Prevention professionals have been at the forefront of this revolution, harnessing advanced tools and capabilities that have greatly enhanced their effectiveness in preventing and resolving criminal activities. This article explores how the use of technology, including drones, cameras, AI, video analytics, and intelligence software, has reshaped security investigations and how staying on the cutting edge of these advancements is crucial for the future of this field.

Ep And Security Professionals Help In The Fight Against Fraud, Alan Saquella

Publications

Fraud and corruption remain a significant issue for organizations worldwide, with the latest ACFE Report to the Nations indicating that it costs over $300 million, and corruption is one of the most prevalent methods of fraud. The lack of equal application of the Foreign Corrupt Practices Act (FCPA) in other countries due to cultural differences is one reason fraud and corruption persist. However, there are several ways in which organizations can curb the increase in white-collar crime, including the integration of security and executive protection into their fraud prevention strategies.

Security Investigations: A Professional's Guide, Alan Saquella, Larry Nicholson

Publications

From the forward:

"Security Investigations A Professional’s Guide has been expertly crafted to equip both novices and experienced investigators with the essential knowledge and skill to excel in the field of investigations. Whether aiming for a career in law enforcement, private investigations, corporate security, or you are simply interested in unraveling mysteries, this book will serve as your ultimate companion on the journey to becoming a proficient investigator."

Chapters 1 and 2 are presented here.

Exploring Myths In Digital Forensics: Separating Science From Ritual, Gary C. Kessler, Gregory H. Carlton

Publications

Digital forensic methodology deviates significantly relative to the methods of other forensic sciences for numerous practical reasons, and it has been largely influenced by factors derived from the inception and evolution of this relatively new and rapidly changing field. Digital forensics methodology was developed more by practitioners in its early days rather than by computer scientists. This led to accepted best practices in the field that may not represent the best or, at least, tested, science. This paper explores some of these differences in the practice and evolution between digital and other forensic sciences, and recommends scientific approaches to apply …

Educating The Next Generation Of Cyberforensic Professionals, Mark Pollitt, Philip Craiger

Publications

This paper provides a historical overview of the development of cyberforensics as a scientific discipline, along with a description of the current state of training, educational programs, certification and accreditation. The paper traces the origins of cyberforensics, the acceptance of cyberforensics as a forensic science and its recognition as a component of information security. It also discusses the development of professional certification and standardized bodies of knowledge that have had a substantial impact on the discipline. Finally, it discusses the accreditation of cyberforensic educational programs, its linkage with the bodies of knowledge and its effect on cyberforensic educational programs.

Forensic Analysis Of Plug Computers, Scott Conrad, Greg Dorn, Philip Craiger

Publications

A plug computer is essentially a cross between an embedded computer and a traditional computer, and with many of the same capabilities. However, the architecture of a plug computer makes it difficult to apply commonly used digital forensic methods. This paper describes methods for extracting and analyzing digital evidence from plug computers. Two popular plug computer models are examined, the SheevaPlug and the Pogoplug.

Forensic Analysis Of A Playstation 3 Console, Scott Conrad, Greg Dorn, Philip Craiger

Publications

The Sony PlayStation 3 (PS3) is a powerful gaming console that supports Internet-related activities, local file storage and the playing of Blu-ray movies. The PS3 also allows users to partition and install a secondary operating system on the hard drive. This “desktop-like” functionality along with the encryption of the primary hard drive containing the gaming software raises significant issues related to the forensic analysis of PS3 systems. This paper discusses the PS3 architecture and behavior, and provides recommendations for conducting forensic investigations of PS3 systems.

Forensic Analysis Of The Sony Playstation Portable, Scott Conrad, Carlos Rodriguez, Chris Marberry, Philip Craiger

Publications

The Sony PlayStation Portable (PSP) is a popular portable gaming device with features such as wireless Internet access and image, music and movie playback. As with most systems built around a processor and storage, the PSP can be used for purposes other than it was originally intended – legal as well as illegal. This paper discusses the features of the PSP browser and suggests best practices for extracting digital evidence.

Forensic Analysis Of Xbox Consoles, Paul Burke, Philip Craiger

Publications

Microsoft’s Xbox game console can be modified to run additional operating systems, enabling it to store gigabytes of non-game related files and run various computer services. Little has been published, however, on procedures for determining whether or not an Xbox console has been modified, for creating a forensic duplicate, and for conducting a forensic investigation. Given the growing popularity of Xbox systems, it is important to understand how to identify, image and examine these devices while reducing the potential of corrupting the media. This paper discusses Xbox forensics and provides a set of forensically-sound procedures for analyzing Xbox consoles.

Factors Affecting One-Way Hashing Of Cd-R Media, Christopher Marberry, Philip Craiger

Publications

While conducting a validation study of proficiency test media we found that applying the same hash algorithm against a single CD using different forensic applications resulted in different hash values. We formulated a series of experiments to determine the cause of the anomalous hash values. Our results suggest that certain write options cause forensic applications to report different hash values. We examine the possible consequences of these anomalies in legal proceedings and provide best practices for the use of hashing procedures.

Mac Os X Forensics, Philip Craiger, Paul Burke

Publications

This paper describes procedures for conducting forensic examinations of Apple Macs running Mac OS X. The target disk mode is used to create a forensic duplicate of a Mac hard drive and preview it. Procedures are discussed for recovering evidence from allocated space, unallocated space, slack space and virtual memory. Furthermore, procedures are described for recovering trace evidence from Mac OS X default email, web browser and instant messaging applications, as well as evidence pertaining to commands executed from a terminal.

Recovering Digital Evidence From Linux Systems, Philip Craiger

Publications

As Linux-kernel-based operating systems proliferate there will be an inevitable increase in Linux systems that law enforcement agents must process in criminal investigations. The skills and expertise required to recover evidence from Microsoft-Windows-based systems do not necessarily translate to Linux systems. This paper discusses digital forensic procedures for recovering evidence from Linux systems. In particular, it presents methods for identifying and recovering deleted files from disk and volatile memory, identifying notable and Trojan files, finding hidden files, and finding files with renamed extensions. All the procedures are accomplished using Linux command line utilities and require no special or commercial tools.