Google launched a feature for Android phones Tuesday for dedicated forensic logs about intrusions from sophisticated attacks like those by spyware vendors, in what design partners at Amnesty International hailed as an important first. The tech giant has been ramping up the new feature, Intrusion Logging, since last year, and has now begun rolling it…
Tag: forensic
AI, Apps, Cybersecurity, Global Security News, Risk Management
A framework for securely collecting forensic artifacts into S3 buckets
When customers experience a security incident, they need to acquire forensic artifacts to identify root cause, extract indicators of compromise (IoCs), and validate remediation efforts. NIST 800-86, Guide to Integrating Forensic Techniques into Incident Response, defines digital forensics as a process comprised of four basic phases: collection, examination, analysis, and reporting. This blog post focuses…
AI, Global Security News
ExtraHop® Delivers the Foundation for Secure AI Innovation Across the Agentic Enterprise
Comprehensive AI asset inventory and real-time observability deliver advanced threat detection, forensic evidence needed to enforce governance
Global Security News
Forensic IT ‘strengthens forensic leadership’ with new executive GM
Digital forensics and incident response specialist, Forensic IT, has appointed industry veteran, Chris Hatfield as Executive General Manager.
AI, Compliance, Global Security News, Government & Policy, Risk Management
Citizen Lab links Cellebrite to the hacking of a Kenyan presidential candidate’s phone
Researchers have found forensic evidence suggesting that Kenyan authorities used Cellebrite’s phone-cracking technology on the device of a prominent human rights activist after arresting him, according to a report published Tuesday. The University of Toronto’s Citizen Lab said the intrusion is a sign of growing abuse of Cellebrite’s technology. According to the report, after his…
AI, Apps, Global Security News, Network Security, Tools & Platforms
ExtraHop Expands Agentic SOCs With Deeper Visibility
ExtraHop, a modern network detection and response (NDR) provider, has launched new visibility and forensic capabilities that deliver the contextual insights required to power agentic SOCs and enable more autonomous defense against sophisticated threat actors. Setting AI agents up for success Citing the growth of AI-assisted attacks, ExtraHop says these new capabilities aim to equip…
Global Security News
EnCase Driver Weaponized as EDR Killers Persist
The forensic tool’s driver was signed with a digital certificate that expired years ago, but major security gaps allowed Windows to load it.