<br /> Digital<br /> The Quarterly Magazine for Digital Forensics Practitioners Issue 40 · August 2019<br /> ForensicS<br /> Magazine 10th<br /> ANNIVERSARY<br /> ISSUE!<br /> Cyber<br /> Security<br /> Ops 101<br /> Andy Moore shows us how to<br /> prepare for and respond to<br /> the inevitable breach…<br /> PLUS<br /> Data Leakage in Smartphones<br /> Unexpected Payloads in Unexpected Places<br /> Online Tracking Techniques and Countermeasures<br /> 9<br /> From the Lab: Imagery Forensics in 2019 Issue 40 / £14.99 TR Media<br /> 40<br /> 772042 061004<br /> <br /> Editorial<br /> W<br /> ow! Where did the time go…?<br /> 10 years ago, we had this idea to create<br /> <a title="DFM40 - Online page 1" href="http://viewer.zmags.com/publication/e0f7fbf8?page=1"> Digital The Quarterly Magazine for Digital Fore</a> <a title="DFM40 - Online page 2" href="http://viewer.zmags.com/publication/e0f7fbf8?page=2"> </a> <a title="DFM40 - Online page 3" href="http://viewer.zmags.com/publication/e0f7fbf8?page=3"> Editorial W </a> <a title="DFM40 - Online page 4" href="http://viewer.zmags.com/publication/e0f7fbf8?page=4"> B uilding on the suc</a> <a title="DFM40 - Online page 5" href="http://viewer.zmags.com/publication/e0f7fbf8?page=5"> Contents FEATURES 8 Data Leakage Issues in Smart</a> <a title="DFM40 - Online page 6" href="http://viewer.zmags.com/publication/e0f7fbf8?page=6"> NEWS News Disruptive Data Security Key to Outwit</a> <a title="DFM40 - Online page 7" href="http://viewer.zmags.com/publication/e0f7fbf8?page=7"> Cervello Raises $4.5M Seed Round for its Innovati</a> <a title="DFM40 - Online page 8" href="http://viewer.zmags.com/publication/e0f7fbf8?page=8"> FEATURE INTERMEDIATE Data Leakage Issues in SMAR</a> <a title="DFM40 - Online page 9" href="http://viewer.zmags.com/publication/e0f7fbf8?page=9"> manufacturers and the software vendors. When a us</a> <a title="DFM40 - Online page 10" href="http://viewer.zmags.com/publication/e0f7fbf8?page=10"> FEATURE INTERMEDIATE application developers t</a> <a title="DFM40 - Online page 11" href="http://viewer.zmags.com/publication/e0f7fbf8?page=11"> The experimental work was subdivided into d</a> <a title="DFM40 - Online page 12" href="http://viewer.zmags.com/publication/e0f7fbf8?page=12"> FEATURE INTERMEDIATE application, or not to u</a> <a title="DFM40 - Online page 13" href="http://viewer.zmags.com/publication/e0f7fbf8?page=13"> where the later has few privacy options due to op</a> <a title="DFM40 - Online page 14" href="http://viewer.zmags.com/publication/e0f7fbf8?page=14"> MAIN FEATURE ENTRY Cyber Security Operations 100</a> <a title="DFM40 - Online page 15" href="http://viewer.zmags.com/publication/e0f7fbf8?page=15"> Anatomy of a Breach In attempting to develop stra</a> <a title="DFM40 - Online page 16" href="http://viewer.zmags.com/publication/e0f7fbf8?page=16"> MAIN FEATURE ENTRY • Reconnaissance – gatheri</a> <a title="DFM40 - Online page 17" href="http://viewer.zmags.com/publication/e0f7fbf8?page=17"> ProMon – Overview Of the 6 incident response stag</a> <a title="DFM40 - Online page 18" href="http://viewer.zmags.com/publication/e0f7fbf8?page=18"> MAIN FEATURE ENTRY EXPERT TIP: The Importance </a> <a title="DFM40 - Online page 19" href="http://viewer.zmags.com/publication/e0f7fbf8?page=19"> Figure 3. Forensic Artefact Harvesting tools wh</a> <a title="DFM40 - Online page 20" href="http://viewer.zmags.com/publication/e0f7fbf8?page=20"> MAIN FEATURE ENTRY </a> <a title="DFM40 - Online page 21" href="http://viewer.zmags.com/publication/e0f7fbf8?page=21"> </a> <a title="DFM40 - Online page 22" href="http://viewer.zmags.com/publication/e0f7fbf8?page=22"> </a> <a title="DFM40 - Online page 23" href="http://viewer.zmags.com/publication/e0f7fbf8?page=23"> LEGAL Editorial I n 1988, Australi</a> <a title="DFM40 - Online page 24" href="http://viewer.zmags.com/publication/e0f7fbf8?page=24"> H arold Thomas </a> <a title="DFM40 - Online page 25" href="http://viewer.zmags.com/publication/e0f7fbf8?page=25"> purchase actual rotating media hard drives in PCM</a> <a title="DFM40 - Online page 26" href="http://viewer.zmags.com/publication/e0f7fbf8?page=26"> LEGAL FEATURE them the information they had g</a> <a title="DFM40 - Online page 27" href="http://viewer.zmags.com/publication/e0f7fbf8?page=27"> DLP is focused on the data itself. A successful D</a> <a title="DFM40 - Online page 28" href="http://viewer.zmags.com/publication/e0f7fbf8?page=28"> LEGAL NEWS LEGAL News Whatever Happened to GDPR? </a> <a title="DFM40 - Online page 29" href="http://viewer.zmags.com/publication/e0f7fbf8?page=29"> </a> <a title="DFM40 - Online page 30" href="http://viewer.zmags.com/publication/e0f7fbf8?page=30"> FROM THE LAB INTERMEDIATE Imagery Forensics in 2</a> <a title="DFM40 - Online page 31" href="http://viewer.zmags.com/publication/e0f7fbf8?page=31"> It’s a big leap to go from a making a dee</a> <a title="DFM40 - Online page 32" href="http://viewer.zmags.com/publication/e0f7fbf8?page=32"> FROM THE LAB INTERMEDIATE </a> <a title="DFM40 - Online page 33" href="http://viewer.zmags.com/publication/e0f7fbf8?page=33"> Tourist on the Twin Towers and use this as a re</a> <a title="DFM40 - Online page 34" href="http://viewer.zmags.com/publication/e0f7fbf8?page=34"> FROM THE LAB INTERMEDIATE </a> <a title="DFM40 - Online page 35" href="http://viewer.zmags.com/publication/e0f7fbf8?page=35"> … and Error Level Analysis the storage limitati</a> <a title="DFM40 - Online page 36" href="http://viewer.zmags.com/publication/e0f7fbf8?page=36"> FROM THE LAB INTERMEDIATE </a> <a title="DFM40 - Online page 37" href="http://viewer.zmags.com/publication/e0f7fbf8?page=37"> </a> <a title="DFM40 - Online page 38" href="http://viewer.zmags.com/publication/e0f7fbf8?page=38"> 360 36 Letters, emails, tweets, connections and m</a> <a title="DFM40 - Online page 39" href="http://viewer.zmags.com/publication/e0f7fbf8?page=39"> FACEBOOK At present we have a Facebook group, whi</a> <a title="DFM40 - Online page 40" href="http://viewer.zmags.com/publication/e0f7fbf8?page=40"> ADVERTORIAL UNIVERSITY OF WARWICK CYBER SECURITY,</a> <a title="DFM40 - Online page 41" href="http://viewer.zmags.com/publication/e0f7fbf8?page=41"> 41</a> <a title="DFM40 - Online page 42" href="http://viewer.zmags.com/publication/e0f7fbf8?page=42"> FROM THE LAB ENTRY Online Tracking Techniques &</a> <a title="DFM40 - Online page 43" href="http://viewer.zmags.com/publication/e0f7fbf8?page=43"> The more you change your web browser </a> <a title="DFM40 - Online page 44" href="http://viewer.zmags.com/publication/e0f7fbf8?page=44"> FROM THE LAB ENTRY </a> <a title="DFM40 - Online page 45" href="http://viewer.zmags.com/publication/e0f7fbf8?page=45"> Figure 2 ETags – ETags are another way of track</a> <a title="DFM40 - Online page 46" href="http://viewer.zmags.com/publication/e0f7fbf8?page=46"> FROM THE LAB ENTRY Fig</a> <a title="DFM40 - Online page 47" href="http://viewer.zmags.com/publication/e0f7fbf8?page=47"> The General Data Protection Regulation imposes on</a> <a title="DFM40 - Online page 48" href="http://viewer.zmags.com/publication/e0f7fbf8?page=48"> COMPETITION Competition Fancy winning a nifty li</a> <a title="DFM40 - Online page 49" href="http://viewer.zmags.com/publication/e0f7fbf8?page=49"> </a> <a title="DFM40 - Online page 50" href="http://viewer.zmags.com/publication/e0f7fbf8?page=50"> FEATURE INTERMEDIATE Unexpected Payloads in Unex</a> <a title="DFM40 - Online page 51" href="http://viewer.zmags.com/publication/e0f7fbf8?page=51"> Figure 1a Figure 1b Fig</a> <a title="DFM40 - Online page 52" href="http://viewer.zmags.com/publication/e0f7fbf8?page=52"> FEATURE INTERMEDIATE Figu</a> <a title="DFM40 - Online page 53" href="http://viewer.zmags.com/publication/e0f7fbf8?page=53"> Figure 4 You may now be wondering how this</a> <a title="DFM40 - Online page 54" href="http://viewer.zmags.com/publication/e0f7fbf8?page=54"> FEATURE INTERMEDIATE Online Stalking Under Indi</a> <a title="DFM40 - Online page 55" href="http://viewer.zmags.com/publication/e0f7fbf8?page=55"> Cyber stalkers find their victims by using sear</a> <a title="DFM40 - Online page 56" href="http://viewer.zmags.com/publication/e0f7fbf8?page=56"> FEATURE INTERMEDIATE </a> <a title="DFM40 - Online page 57" href="http://viewer.zmags.com/publication/e0f7fbf8?page=57"> Typical areas where stalking takes place includes</a> <a title="DFM40 - Online page 58" href="http://viewer.zmags.com/publication/e0f7fbf8?page=58"> FEATURE INTERMEDIATE </a> <a title="DFM40 - Online page 59" href="http://viewer.zmags.com/publication/e0f7fbf8?page=59"> Other factors which have been identified in cyber-</a> <a title="DFM40 - Online page 60" href="http://viewer.zmags.com/publication/e0f7fbf8?page=60"> FEATURE INTERMEDIATE </a> <a title="DFM40 - Online page 61" href="http://viewer.zmags.com/publication/e0f7fbf8?page=61"> One can avoid becoming the target of online haras</a> <a title="DFM40 - Online page 62" href="http://viewer.zmags.com/publication/e0f7fbf8?page=62"> · Published over 520 articles · Worked with over </a> <a title="DFM40 - Online page 63" href="http://viewer.zmags.com/publication/e0f7fbf8?page=63"> of DFM Digital The Quarterly Magazine for Digit</a> <a title="DFM40 - Online page 64" href="http://viewer.zmags.com/publication/e0f7fbf8?page=64"> MEET THE TEAM MeetTHE Team A </a> <a title="DFM40 - Online page 65" href="http://viewer.zmags.com/publication/e0f7fbf8?page=65"> Alastair C</a> <a title="DFM40 - Online page 66" href="http://viewer.zmags.com/publication/e0f7fbf8?page=66"> W e th</a> <a title="DFM40 - Online page 67" href="http://viewer.zmags.com/publication/e0f7fbf8?page=67"> update on his research work, his articles are alw</a> <a title="DFM40 - Online page 68" href="http://viewer.zmags.com/publication/e0f7fbf8?page=68"> MEET THE AUTHORS </a> <a title="DFM40 - Online page 69" href="http://viewer.zmags.com/publication/e0f7fbf8?page=69"> </a> <a title="DFM40 - Online page 70" href="http://viewer.zmags.com/publication/e0f7fbf8?page=70"> P art of the chan</a> <a title="DFM40 - Online page 71" href="http://viewer.zmags.com/publication/e0f7fbf8?page=71"> </a> <a title="DFM40 - Online page 72" href="http://viewer.zmags.com/publication/e0f7fbf8?page=72"> T hey always say that t</a> <a title="DFM40 - Online page 73" href="http://viewer.zmags.com/publication/e0f7fbf8?page=73"> NEXT ISSUE NEXT Issue Continuing our aim of bring</a> <a title="DFM40 - Online page 74" href="http://viewer.zmags.com/publication/e0f7fbf8?page=74"> </a> <a title="DFM40 - Online page 75" href="http://viewer.zmags.com/publication/e0f7fbf8?page=75"> BOOK Reviews A </a> <a title="DFM40 - Online page 76" href="http://viewer.zmags.com/publication/e0f7fbf8?page=76"> LIBRARY SUBSCRIPTIONS NOW AVAILABLE You can get</a> <a title="DFM40 - Online page 77" href="http://viewer.zmags.com/publication/e0f7fbf8?page=77"> BACK ISSUES BACK Issues 36 Accelerate Password C</a> <a title="DFM40 - Online page 78" href="http://viewer.zmags.com/publication/e0f7fbf8?page=78"> IRQ IRQ Boil in the Bag Science. A </a> <a title="DFM40 - Online page 79" href="http://viewer.zmags.com/publication/e0f7fbf8?page=79"> </a> <a title="DFM40 - Online page 80" href="http://viewer.zmags.com/publication/e0f7fbf8?page=80"> </a>