2 weeks ago I mentioned I was writing an essay on the Open Computer Forensics Architecture (OCFA). I gave up trying to get OCFA to work in the end as it was just a total pain. The documentation is awful, and the error messages it spews out are not useful. Steven spent a few hours looking at their source code to figure out why it kept segfaulting, but it wasn't worth it. I chose to do my essay on file encryption and full disk encryption (FDE) and the effect of these on digital forensics. You can read all 5000 words if you are interested.

Read full article

Happy New Year! I had my one and only exam for last semester yesterday – Forensic Science Theory 1. It went ok, I definitely think I passed. The exam has very little theory in it compared to previous years surprisingly: no chemical presumptive tests or questions about microscopes or Bayes Theory and likelihood ratios. The questions were also fairly essay-like, i.e. all the marks for answering one question rather than in parts so I really can’t tell if I did alright or very well.

Read full article