<br /> Digital<br /> The Quarterly Magazine for Digital Forensics Practitioners Issue 36 · August 2018<br /> ForensicS<br /> Magazine<br /> Forensics Europe Expo<br /> DFM Forensics Conference 2019<br /> Call for Papers<br /> Forensic<br /> Linguistics<br /> Emily Chiang investigates how language could help<br /> identify anonymous child sex offenders online<br /> PLUS<br /> The Rise of AI in Media Forensics<br /> Live Memory Forensics & Analysis<br /> Accelerate Password Cracking with GPUs<br /> 9<br /> From the Lab: Historical GPS Phone Records772042 061004<br /> 36<br /> Issue 36 / £14.99 TR Media<br /> <br /> Editorial<br /> S<br /> o the change continues, I thought I would share<br /> with you a note I put to the UK PETRAS Project<br /> <a title="DFM36 - Online page 1" href="http://viewer.zmags.com/publication/cc5ca72f?page=1"> Digital The Quarterly Magazine for Digital Fore</a> <a title="DFM36 - Online page 2" href="http://viewer.zmags.com/publication/cc5ca72f?page=2"> </a> <a title="DFM36 - Online page 3" href="http://viewer.zmags.com/publication/cc5ca72f?page=3"> Editorial S </a> <a title="DFM36 - Online page 4" href="http://viewer.zmags.com/publication/cc5ca72f?page=4"> B uilding on the suc</a> <a title="DFM36 - Online page 5" href="http://viewer.zmags.com/publication/cc5ca72f?page=5"> Contents FEATURES 8 Accelerating Child Exploitat</a> <a title="DFM36 - Online page 6" href="http://viewer.zmags.com/publication/cc5ca72f?page=6"> NEWS News UK Government Issues Cyber Security Pr</a> <a title="DFM36 - Online page 7" href="http://viewer.zmags.com/publication/cc5ca72f?page=7"> Customer data is the lifeblood of ever- expanding</a> <a title="DFM36 - Online page 8" href="http://viewer.zmags.com/publication/cc5ca72f?page=8"> FEATURE INTERMEDIATE Accelerating Child Exploita</a> <a title="DFM36 - Online page 9" href="http://viewer.zmags.com/publication/cc5ca72f?page=9"> More than just identifying pictures with </a> <a title="DFM36 - Online page 10" href="http://viewer.zmags.com/publication/cc5ca72f?page=10"> FEATURE INTERMEDIATE • Entity extraction allo</a> <a title="DFM36 - Online page 11" href="http://viewer.zmags.com/publication/cc5ca72f?page=11"> It isn’t enough, therefore, to define a simp</a> <a title="DFM36 - Online page 12" href="http://viewer.zmags.com/publication/cc5ca72f?page=12"> FEATURE INTERMEDIATE Once training is co</a> <a title="DFM36 - Online page 13" href="http://viewer.zmags.com/publication/cc5ca72f?page=13"> </a> <a title="DFM36 - Online page 14" href="http://viewer.zmags.com/publication/cc5ca72f?page=14"> FEATURE ADVANCED Digital Forensic Tool Capabili</a> <a title="DFM36 - Online page 15" href="http://viewer.zmags.com/publication/cc5ca72f?page=15"> THE SIX CHALLENGES 1. Difficult-to-Assemble Credi</a> <a title="DFM36 - Online page 16" href="http://viewer.zmags.com/publication/cc5ca72f?page=16"> FEATURE ADVANCED from formal training and aro</a> <a title="DFM36 - Online page 17" href="http://viewer.zmags.com/publication/cc5ca72f?page=17"> 6. A Shortage of Tools and Monitoring for Handlin</a> <a title="DFM36 - Online page 18" href="http://viewer.zmags.com/publication/cc5ca72f?page=18"> FEATURE ADVANCED SCENARIO MSAB XRY RESULTS</a> <a title="DFM36 - Online page 19" href="http://viewer.zmags.com/publication/cc5ca72f?page=19"> </a> <a title="DFM36 - Online page 20" href="http://viewer.zmags.com/publication/cc5ca72f?page=20"> </a> <a title="DFM36 - Online page 21" href="http://viewer.zmags.com/publication/cc5ca72f?page=21"> LEGAL Editorial T ho</a> <a title="DFM36 - Online page 22" href="http://viewer.zmags.com/publication/cc5ca72f?page=22"> Scott Zimmerman takes a look at the Tesla lawsuit</a> <a title="DFM36 - Online page 23" href="http://viewer.zmags.com/publication/cc5ca72f?page=23"> According to the complaint filed in the Calif</a> <a title="DFM36 - Online page 24" href="http://viewer.zmags.com/publication/cc5ca72f?page=24"> LEGAL FEATURE Some readers of DFM may s</a> <a title="DFM36 - Online page 25" href="http://viewer.zmags.com/publication/cc5ca72f?page=25"> It appears the data `exfiltration' was treate</a> <a title="DFM36 - Online page 26" href="http://viewer.zmags.com/publication/cc5ca72f?page=26"> LEGAL NEWS LEGAL News Apple Performance Throttlin</a> <a title="DFM36 - Online page 27" href="http://viewer.zmags.com/publication/cc5ca72f?page=27"> </a> <a title="DFM36 - Online page 28" href="http://viewer.zmags.com/publication/cc5ca72f?page=28"> FROM THE LAB INTERMEDIATE A Method for Using His</a> <a title="DFM36 - Online page 29" href="http://viewer.zmags.com/publication/cc5ca72f?page=29"> Hansen (2011) also characterized this use of hist</a> <a title="DFM36 - Online page 30" href="http://viewer.zmags.com/publication/cc5ca72f?page=30"> FROM THE LAB INTERMEDIATE There are cert</a> <a title="DFM36 - Online page 31" href="http://viewer.zmags.com/publication/cc5ca72f?page=31"> TIME CELL TOWER CONNECTED TO DISTANCE TO NEXT TOW</a> <a title="DFM36 - Online page 32" href="http://viewer.zmags.com/publication/cc5ca72f?page=32"> FROM THE LAB INTERMEDIATE </a> <a title="DFM36 - Online page 33" href="http://viewer.zmags.com/publication/cc5ca72f?page=33"> </a> <a title="DFM36 - Online page 34" href="http://viewer.zmags.com/publication/cc5ca72f?page=34"> FEATURE INTERMEDIATE Attack of the Clones James </a> <a title="DFM36 - Online page 35" href="http://viewer.zmags.com/publication/cc5ca72f?page=35"> The battle between good and evil is now turning i</a> <a title="DFM36 - Online page 36" href="http://viewer.zmags.com/publication/cc5ca72f?page=36"> FEATURE INTERMEDIATE </a> <a title="DFM36 - Online page 37" href="http://viewer.zmags.com/publication/cc5ca72f?page=37"> The first considered manipulation of multimedia </a> <a title="DFM36 - Online page 38" href="http://viewer.zmags.com/publication/cc5ca72f?page=38"> FEATURE INTERMEDIATE </a> <a title="DFM36 - Online page 39" href="http://viewer.zmags.com/publication/cc5ca72f?page=39"> NVIDIA's Inpainting The potential harm from man</a> <a title="DFM36 - Online page 40" href="http://viewer.zmags.com/publication/cc5ca72f?page=40"> ADVERTORIAL UNIVERSITY OF WARWICK CYBER SECURITY,</a> <a title="DFM36 - Online page 41" href="http://viewer.zmags.com/publication/cc5ca72f?page=41"> 41</a> <a title="DFM36 - Online page 42" href="http://viewer.zmags.com/publication/cc5ca72f?page=42"> MAIN FEATURE ENTRY Forensic Linguistics Emily Chi</a> <a title="DFM36 - Online page 43" href="http://viewer.zmags.com/publication/cc5ca72f?page=43"> Online Child Sexual Abuse Sadly, we are in a time</a> <a title="DFM36 - Online page 44" href="http://viewer.zmags.com/publication/cc5ca72f?page=44"> MAIN FEATURE ENTRY By describing language in </a> <a title="DFM36 - Online page 45" href="http://viewer.zmags.com/publication/cc5ca72f?page=45"> Figure 1. Frequency of offender moves across 20 t</a> <a title="DFM36 - Online page 46" href="http://viewer.zmags.com/publication/cc5ca72f?page=46"> MAIN FEATURE ENTRY Figure </a> <a title="DFM36 - Online page 47" href="http://viewer.zmags.com/publication/cc5ca72f?page=47"> Figure 3. Number of lines before initiating Sexua</a> <a title="DFM36 - Online page 48" href="http://viewer.zmags.com/publication/cc5ca72f?page=48"> MAIN FEATURE ENTRY Fi</a> <a title="DFM36 - Online page 49" href="http://viewer.zmags.com/publication/cc5ca72f?page=49"> </a> <a title="DFM36 - Online page 50" href="http://viewer.zmags.com/publication/cc5ca72f?page=50"> MORE THAN A MAG Digital Forensics Magazine prides</a> <a title="DFM36 - Online page 51" href="http://viewer.zmags.com/publication/cc5ca72f?page=51"> </a> <a title="DFM36 - Online page 52" href="http://viewer.zmags.com/publication/cc5ca72f?page=52"> FEATURE ADVANCED Accelerate Password Cracking Ri</a> <a title="DFM36 - Online page 53" href="http://viewer.zmags.com/publication/cc5ca72f?page=53"> It has already been said that password hashe</a> <a title="DFM36 - Online page 54" href="http://viewer.zmags.com/publication/cc5ca72f?page=54"> FEATURE ADVANCED The second attack type</a> <a title="DFM36 - Online page 55" href="http://viewer.zmags.com/publication/cc5ca72f?page=55"> Figure 3. Visual Studio Is Integrated With The Cu</a> <a title="DFM36 - Online page 56" href="http://viewer.zmags.com/publication/cc5ca72f?page=56"> COMPETITION Competition Fancy winning a nifty li</a> <a title="DFM36 - Online page 57" href="http://viewer.zmags.com/publication/cc5ca72f?page=57"> </a> <a title="DFM36 - Online page 58" href="http://viewer.zmags.com/publication/cc5ca72f?page=58"> FEATURE ADVANCED Live Memory Forensics & Analysi</a> <a title="DFM36 - Online page 59" href="http://viewer.zmags.com/publication/cc5ca72f?page=59"> Each acquisition was taken to produce the tools d</a> <a title="DFM36 - Online page 60" href="http://viewer.zmags.com/publication/cc5ca72f?page=60"> FEATURE ADVANCED INFORMATION TYPE SIGNIFIC</a> <a title="DFM36 - Online page 61" href="http://viewer.zmags.com/publication/cc5ca72f?page=61"> Figure 4. Security Settings USB device used. To</a> <a title="DFM36 - Online page 62" href="http://viewer.zmags.com/publication/cc5ca72f?page=62"> FEATURE ADVANCED INFORMATION TYPE OBSERVAT</a> <a title="DFM36 - Online page 63" href="http://viewer.zmags.com/publication/cc5ca72f?page=63"> Command History: Identified account credentia</a> <a title="DFM36 - Online page 64" href="http://viewer.zmags.com/publication/cc5ca72f?page=64"> FEATURE ADVANCED Figure 14. Responde</a> <a title="DFM36 - Online page 65" href="http://viewer.zmags.com/publication/cc5ca72f?page=65"> </a> <a title="DFM36 - Online page 66" href="http://viewer.zmags.com/publication/cc5ca72f?page=66"> FEATURE ENTRY The Need for Digital Forensic Inve</a> <a title="DFM36 - Online page 67" href="http://viewer.zmags.com/publication/cc5ca72f?page=67"> Digital Forensic Inspectors nee</a> <a title="DFM36 - Online page 68" href="http://viewer.zmags.com/publication/cc5ca72f?page=68"> FEATURE ENTRY Following Digital Footprints to </a> <a title="DFM36 - Online page 69" href="http://viewer.zmags.com/publication/cc5ca72f?page=69"> Behind the Scenes of the Digital Investigation Pr</a> <a title="DFM36 - Online page 70" href="http://viewer.zmags.com/publication/cc5ca72f?page=70"> 360 36 Letters, emails, tweets, connections and m</a> <a title="DFM36 - Online page 71" href="http://viewer.zmags.com/publication/cc5ca72f?page=71"> TWITTER We are regularly tweeting tools, tips and</a> <a title="DFM36 - Online page 72" href="http://viewer.zmags.com/publication/cc5ca72f?page=72"> LIBRARY SUBSCRIPTIONS NOW AVAILABLE You can get</a> <a title="DFM36 - Online page 73" href="http://viewer.zmags.com/publication/cc5ca72f?page=73"> NEXT ISSUE NEXT Issue Continuing our aim of bring</a> <a title="DFM36 - Online page 74" href="http://viewer.zmags.com/publication/cc5ca72f?page=74"> </a> <a title="DFM36 - Online page 75" href="http://viewer.zmags.com/publication/cc5ca72f?page=75"> BOOK Reviews A </a> <a title="DFM36 - Online page 76" href="http://viewer.zmags.com/publication/cc5ca72f?page=76"> REVIEWS BOOKS T his </a> <a title="DFM36 - Online page 77" href="http://viewer.zmags.com/publication/cc5ca72f?page=77"> BACK ISSUES BACK Issues Digital The Quarterly M</a> <a title="DFM36 - Online page 78" href="http://viewer.zmags.com/publication/cc5ca72f?page=78"> IRQ IRQ Standards Schmandards. R </a> <a title="DFM36 - Online page 79" href="http://viewer.zmags.com/publication/cc5ca72f?page=79"> </a> <a title="DFM36 - Online page 80" href="http://viewer.zmags.com/publication/cc5ca72f?page=80"> </a>