Research

Digital forensic tools and techniques

CCL-Forensics is committed to staying at the forefront of the digital forensics industry. To achieve this, the company employs a number of full-time dedicated research and development analysts to devise and validate new forensically-sound tools and internal systems to ensure maximum productivity.

As technology continues to advance, the challenges facing digital forensic analysts become more and more complex. But here at CCL-Forensics, we believe that this offers a major opportunity in the world of digital evidence, as devices are capable of holding a much larger quantity of data. "Standard" forensic tools may not extract this data, but CCL-Forensics is constantly developing more and better forensic tools to enable its analysts to extract this potentially valuable evidence.

This page will be regularly updated with details of our R&D advancements, showcasing the tools and techniques we can use to extract more data from more devices in our secure forensic laboratories.

Please click below - then scroll down to read your chosen story...

YouTube video channel

We have produced a number of introductory videos to the tools and techniques developed by our in-house Research and Development department.

These tools and techniques are designed to maximise evidential opportunities, and extract more data from more devices.  Please feel free to browse the videos in our Youtube channel below, and if you have any queries, please contact us on 01789 261200 or email info@ccl-forensics.com

This div will be replaced

Mobile phone deleted video whitepaper

CCL-Forensics has partnered with digital forensics training provider, Control-F, to co-author a white paper on the underlying structure of widely used video files on mobile phones.

This can enable forensic examiners to apply a much more intelligent approach to recovering deleted video from a mobile phone hex dump.

CCL-Forensics' Research and Development Analyst Alex Caithness was one of the authors of the paper, which is available for free download by clicking below.

Download deleted video whitepaper

For more details, please contact CCL-Forensics on 01789 261200

Case study using this technique

The phone* was handed into police after being found fixed to a cash machine.  It was sent to CCL-Forensics laboratories, where analysts attempted to recover the last SIM details – in order for a subscriber check to be conducted.  The handset had never actually been used as a phone, and hence there were no SIM details – but analysts delved further, and found fragmented deleted video data on the memory card.

Using techniques detailed in the whitepaper, CCL-Forensics' analysts were able to recover and rebuild a video which showed the device in operation, capturing the keypad of the ATM.

* Some details of the case have been changed for security reasons, but the sense of the case and the processes used are genuine