<br /> Digital<br /> The Quarterly Magazine for Digital Forensics Practitioners Issue 38 · February 2019<br /> Digital Forensics Practitioners Issue 38 · February 2019<br /> ForensicS<br /> Magazine<br /> Forensics Europe Expo<br /> DFM Forensics Conference<br /> Agenda and Speakers<br /> Information INSIDE!<br /> Official<br /> Content<br /> Partner<br /> Augmented<br /> Reality<br /> Brian Cusack explains the challenges<br /> of the digital manipulation of reality<br /> PLUS<br /> SME Encryption<br /> Operation Bitcoins<br /> Social Media Intelligence<br /> 9<br /> From the Lab: WeChat Evidence772042 061004<br /> 38<br /> Issue 38 / £14.99 TR Media<br /> <br /> Editorial<br /> A<br /> s many of you know, I have been busy and<br /> <a title="DFM38 - Online page 1" href="http://viewer.zmags.com/publication/178bd3a9?page=1"> Digital The Quarterly Magazine for Digital Fore</a> <a title="DFM38 - Online page 2" href="http://viewer.zmags.com/publication/178bd3a9?page=2"> </a> <a title="DFM38 - Online page 3" href="http://viewer.zmags.com/publication/178bd3a9?page=3"> Editorial A </a> <a title="DFM38 - Online page 4" href="http://viewer.zmags.com/publication/178bd3a9?page=4"> </a> <a title="DFM38 - Online page 5" href="http://viewer.zmags.com/publication/178bd3a9?page=5"> Contents FEATURES 8 Social Media Intelligence (S</a> <a title="DFM38 - Online page 6" href="http://viewer.zmags.com/publication/178bd3a9?page=6"> NEWS News Sophos Releases `Matrix Deconstructed:</a> <a title="DFM38 - Online page 7" href="http://viewer.zmags.com/publication/178bd3a9?page=7"> 'eml_-_PO20180921.doc'). Often, cyber-criminals t</a> <a title="DFM38 - Online page 8" href="http://viewer.zmags.com/publication/178bd3a9?page=8"> FEATURE INTERMEDIATE Social Media Intelligence (</a> <a title="DFM38 - Online page 9" href="http://viewer.zmags.com/publication/178bd3a9?page=9"> Classifications of Social Media Platforms Many peo</a> <a title="DFM38 - Online page 10" href="http://viewer.zmags.com/publication/178bd3a9?page=10"> FEATURE INTERMEDIATE </a> <a title="DFM38 - Online page 11" href="http://viewer.zmags.com/publication/178bd3a9?page=11"> Figure 2. Twitter search operators Online Faceb</a> <a title="DFM38 - Online page 12" href="http://viewer.zmags.com/publication/178bd3a9?page=12"> FEATURE INTERMEDIATE Using the information publ</a> <a title="DFM38 - Online page 13" href="http://viewer.zmags.com/publication/178bd3a9?page=13"> </a> <a title="DFM38 - Online page 14" href="http://viewer.zmags.com/publication/178bd3a9?page=14"> MAIN FEATURE INTERMEDIATE Augmented Reality Inves</a> <a title="DFM38 - Online page 15" href="http://viewer.zmags.com/publication/178bd3a9?page=15"> Digital Augmentation Exposure to the sporting wor</a> <a title="DFM38 - Online page 16" href="http://viewer.zmags.com/publication/178bd3a9?page=16"> MAIN FEATURE INTERMEDIATE Augmented Reality Co</a> <a title="DFM38 - Online page 17" href="http://viewer.zmags.com/publication/178bd3a9?page=17"> camera. Mobile devices are the biggest users but </a> <a title="DFM38 - Online page 18" href="http://viewer.zmags.com/publication/178bd3a9?page=18"> MAIN FEATURE INTERMEDIATE together is likely </a> <a title="DFM38 - Online page 19" href="http://viewer.zmags.com/publication/178bd3a9?page=19"> AR Investigation Challenges The nature of digital</a> <a title="DFM38 - Online page 20" href="http://viewer.zmags.com/publication/178bd3a9?page=20"> MAIN FEATURE INTERMEDIATE Conclusion The work </a> <a title="DFM38 - Online page 21" href="http://viewer.zmags.com/publication/178bd3a9?page=21"> </a> <a title="DFM38 - Online page 22" href="http://viewer.zmags.com/publication/178bd3a9?page=22"> LIBRARY SUBSCRIPTIONS NOW AVAILABLE You can get</a> <a title="DFM38 - Online page 23" href="http://viewer.zmags.com/publication/178bd3a9?page=23"> LEGAL Editorial I n a DFM item a fe</a> <a title="DFM38 - Online page 24" href="http://viewer.zmags.com/publication/178bd3a9?page=24"> Scott Zimmerman examines Vietnam's new cybersecur</a> <a title="DFM38 - Online page 25" href="http://viewer.zmags.com/publication/178bd3a9?page=25"> in the new Vietnamese law. The letter stated clea</a> <a title="DFM38 - Online page 26" href="http://viewer.zmags.com/publication/178bd3a9?page=26"> LEGAL FEATURE an OCSP responder. The responde</a> <a title="DFM38 - Online page 27" href="http://viewer.zmags.com/publication/178bd3a9?page=27"> employer role descriptions, d) appears to be a ca</a> <a title="DFM38 - Online page 28" href="http://viewer.zmags.com/publication/178bd3a9?page=28"> LEGAL NEWS LEGAL News BREAKING NEWS! Broken Block</a> <a title="DFM38 - Online page 29" href="http://viewer.zmags.com/publication/178bd3a9?page=29"> </a> <a title="DFM38 - Online page 30" href="http://viewer.zmags.com/publication/178bd3a9?page=30"> FORENSIC EUROPE EXPO SPONSORED EVENT Forensics Eu</a> <a title="DFM38 - Online page 31" href="http://viewer.zmags.com/publication/178bd3a9?page=31"> 12:00 – The Use of Superrecognisers </a> <a title="DFM38 - Online page 32" href="http://viewer.zmags.com/publication/178bd3a9?page=32"> </a> <a title="DFM38 - Online page 33" href="http://viewer.zmags.com/publication/178bd3a9?page=33"> </a> <a title="DFM38 - Online page 34" href="http://viewer.zmags.com/publication/178bd3a9?page=34"> FROM THE LAB INTERMEDIATE WeChat Evidence Tyler </a> <a title="DFM38 - Online page 35" href="http://viewer.zmags.com/publication/178bd3a9?page=35"> Within the context of such an environment, i</a> <a title="DFM38 - Online page 36" href="http://viewer.zmags.com/publication/178bd3a9?page=36"> FROM THE LAB INTERMEDIATE Transfers of c</a> <a title="DFM38 - Online page 37" href="http://viewer.zmags.com/publication/178bd3a9?page=37"> To compound the problem, the evidence is oft</a> <a title="DFM38 - Online page 38" href="http://viewer.zmags.com/publication/178bd3a9?page=38"> FROM THE LAB INTERMEDIATE Unless the examiner </a> <a title="DFM38 - Online page 39" href="http://viewer.zmags.com/publication/178bd3a9?page=39"> </a> <a title="DFM38 - Online page 40" href="http://viewer.zmags.com/publication/178bd3a9?page=40"> FEATURE ENTRY Forensic DNA Software John Bucklet</a> <a title="DFM38 - Online page 41" href="http://viewer.zmags.com/publication/178bd3a9?page=41"> The human factor is always a consideration</a> <a title="DFM38 - Online page 42" href="http://viewer.zmags.com/publication/178bd3a9?page=42"> FEATURE ENTRY interpreting the profile obtaine</a> <a title="DFM38 - Online page 43" href="http://viewer.zmags.com/publication/178bd3a9?page=43"> Another potential issue cited by some det</a> <a title="DFM38 - Online page 44" href="http://viewer.zmags.com/publication/178bd3a9?page=44"> FEATURE ENTRY That characterization, ho</a> <a title="DFM38 - Online page 45" href="http://viewer.zmags.com/publication/178bd3a9?page=45"> </a> <a title="DFM38 - Online page 46" href="http://viewer.zmags.com/publication/178bd3a9?page=46"> FEATURE ENTRY Encryption for SMEs Bernard Parson</a> <a title="DFM38 - Online page 47" href="http://viewer.zmags.com/publication/178bd3a9?page=47"> relevant for encryption products. One of these is</a> <a title="DFM38 - Online page 48" href="http://viewer.zmags.com/publication/178bd3a9?page=48"> COMPETITION Competition Fancy winning a nifty li</a> <a title="DFM38 - Online page 49" href="http://viewer.zmags.com/publication/178bd3a9?page=49"> NEXT ISSUE NEXT Issue Continuing our aim of bring</a> <a title="DFM38 - Online page 50" href="http://viewer.zmags.com/publication/178bd3a9?page=50"> ADVERTORIAL UNIVERSITY OF WARWICK CYBER SECURITY,</a> <a title="DFM38 - Online page 51" href="http://viewer.zmags.com/publication/178bd3a9?page=51"> 51</a> <a title="DFM38 - Online page 52" href="http://viewer.zmags.com/publication/178bd3a9?page=52"> MORE THAN A MAG Digital Forensics Magazine prides</a> <a title="DFM38 - Online page 53" href="http://viewer.zmags.com/publication/178bd3a9?page=53"> </a> <a title="DFM38 - Online page 54" href="http://viewer.zmags.com/publication/178bd3a9?page=54"> FEATURE ENTRY Operation Bitcoins The following</a> <a title="DFM38 - Online page 55" href="http://viewer.zmags.com/publication/178bd3a9?page=55"> Figure 2 Apparently, they also consider</a> <a title="DFM38 - Online page 56" href="http://viewer.zmags.com/publication/178bd3a9?page=56"> FEATURE ENTRY the email was sent from an IP t</a> <a title="DFM38 - Online page 57" href="http://viewer.zmags.com/publication/178bd3a9?page=57"> Figure 6 ZERO, 0, none of them. Of course, if t</a> <a title="DFM38 - Online page 58" href="http://viewer.zmags.com/publication/178bd3a9?page=58"> FEATURE ENTRY from operators in Uruguay, Arge</a> <a title="DFM38 - Online page 59" href="http://viewer.zmags.com/publication/178bd3a9?page=59"> BACK ISSUES BACK Issues Digital The Quarterly M</a> <a title="DFM38 - Online page 60" href="http://viewer.zmags.com/publication/178bd3a9?page=60"> 360 36 Letters, emails, tweets, connections and m</a> <a title="DFM38 - Online page 61" href="http://viewer.zmags.com/publication/178bd3a9?page=61"> TWITTER We are regularly tweeting tools, tips and</a> <a title="DFM38 - Online page 62" href="http://viewer.zmags.com/publication/178bd3a9?page=62"> IRQ IRQ Peeling Onions. T </a> <a title="DFM38 - Online page 63" href="http://viewer.zmags.com/publication/178bd3a9?page=63"> </a> <a title="DFM38 - Online page 64" href="http://viewer.zmags.com/publication/178bd3a9?page=64"> </a>