Objective The purpose of this walkthrough is to demonstrate how to successfully decrypt and gain access to a FileVault® 2 protected volume when the recovery key or passphrase is known in order to capture a forensic image for analysis. Tools Used EnCase® v6.18 MacQuisition™ FTK® Imager Mac OS® Terminal Note: MacQuisition 2013 R2 now supports auto-detection of FV2 protected volumes…
State laws all vary as to whether employees are by default at will employment, by agreement, or another variation of the two. In all states, employees could be contracted to do work. Generally, the higher level the employee the more likely that the employer will include a “non-compete agreement” as part of the employee contract. A non-compete agreement can be…
In 2014, we may find ourselves teetering on the edge of some major amendments to the discovery provisions of the Federal Rules of Civil Procedure. Just this month, the United States Courts’ Advisory Committee on Civil Rules voted to send proposed amendments to its Standing Committee on Rules and Practice and Procedure. Their recommendation is that these proposed amendments be…
Since the tragic bombing at the Boston Marathon earlier this week, there have been several fatalities and many severe casualties with more than a hundred people physically injured from the attack. The FBI has taken over the investigation into this heinous crime and is trying to uncover the identity of those involved with executing the attack. Lee Neubecker, a digital…
The Illinois General Assembly is set to consider and vote on Illinois Senate Bill 10, the Marriage Fairness Act. If the measure passes, same sex marriage would become legal in the State of Illinois. Passage of the measure hangs in the balance as reported last week when Illinois Speaker of the General Assembly Michael Madigan reported a shortage of the…
Despite having an active litigation matter where discovery of Google Drive (formally Google Docs) or Gmail is needed to complete discovery, you may have recently received a notice from Google that says they will not respond to your subpoena unless it is served upon them in their local jurisdiction. This might have you and your client questioning if it is…
Lee Neubecker, Forensicon’s President, was interviewed by Vincent Bond regarding the GM trade secret trial of Shanshan Du, a former GM engineer. The case is part of a trend of industrial espionage that has menaced the auto industry — and major corporations and government agencies throughout the United States. “ Often, the greed of trade-secret thieves makes it easy to trap them…