Thursday, April 5, 2018

PFIC Agenda Launched & Keynote Announced

11th Annual PFIC event is back where it all started in Park City, Utah. PFIC is honored to have Jenni Morse from Operation Underground Railroad (O.U.R.) as the 2018 PFIC keynote speaker. O.U.R. is a non-profit organization dedicated to working with law enforcement to help rescue victims of sex trafficking and prosecute traffickers. O.U.R. also vets and assesses aftercare centers around the world which consists of partnering with different organizations, so that the rescued children may receive safety, education, and vocational training. Jenni Morse a former Assistant District Attorney is responsible for studying U.S. and International laws on sex trafficking and cybercrimes; liaising with prosecutors, law enforcement and judges worldwide; evaluating the needs of each country’s law enforcement; and coordinating requested training and vital equipment. PFIC is pleased to bring this topic to light to more of the professionals in the field that might be able to aid in the mission.

from Forensic Focus https://ift.tt/2GD6EKQ

Wednesday, April 4, 2018

Webinar: Ask An Expert: How Will APFS Impact My Investigations?

A new webinar, Ask An Expert: How Will APFS Impact My Investigations?, is available to view here. As BlackBag prepares to release our updated MacQuisition and BlackLight tools with APFS support we want to help examiners get familiar with the file system. In this session Dr. Sylve will cover what you need to know to identify and work with APFS volumes - including what copy-on-write and pooled storage mean for recovery. Join the forum discussion here. View the webinar on YouTube here. Read a full transcript of the webinar here.

from Forensic Focus https://ift.tt/2q4qNyX

50 Years Ago Today!

Fifty-years ago, Dr. Martin Luther King, Jr. was assassinated in Memphis, Tennessee and I was standing in a line of police officers armed with shotguns ready to march into the black community in north Minneapolis in response to the looting and burning that was going on in response to his death.

I was a young patrol officer on the tactical squad and anxious to move in and quell this burning and looting. But then, my boss, after talking to headquarters told us to “stand down.”

I remember how angry we were. Stand down? And the city burning?

The mayor of the city was a University of Minnesota professor in government. Two years later, I had him as a professor in my graduate seminar in public administration.

I thanked him for the courage to make the decision he did that night. It saved many lives and prevented me from having to take one or more of those lives.

I had learned.

After that event, I wrote in Arrested Development:

“I left the tactical squad to try out some ideas I had about foot patrol—especially a foot patrol on Plymouth Avenue on the north side of Minneapolis. Plymouth Avenue was an area of the city that was predominantly black and earlier was the location of the frequent civil rights disturbances that culminated in a night of arson that took place after Dr. Martin Luther King Jr. was slain in Memphis.

“I could try out my ideas because of an unusual leader at the north side precinct, Captain Ken Moore. He was a stand-up guy and agreed to my request to walk a beat on Plymouth Avenue, which was in his precinct. To anyone’s recollection, it was the first foot beat in an all-black area of the city. This neighborhood resented police, and only a year or so earlier had torched many white-owned businesses in the district.

“This was a good place to try and put my new ideas about neighborhood policing into practice.

“The central location on my beat was a newly established neighborhood center called The Way. When I started walking the beat on Plymouth Avenue, I went around and introduced myself. That was my first encounter with community policing. I remember that I didn’t want to wear my uniform hat because I wanted people on my beat to know who I was— that I wasn’t a faceless member of an occupation force. I wanted them to know I wasn’t going to act like other cops they had encountered. I wanted to be there to help and to work with this community. So, I went about establishing relationships (like any good community organizer) and tried to listen, meet community needs and work to solve the problems in the neighborhood…

“My experience on that foot beat, working intimately with people in the neighborhood, caused me to think about police-community relations in a real sense. I knew that without officers who forged good relationships with the people they served and who could gain their trust, the police could do little to solve neighborhood problems, control crime, or keep peace in those neighborhoods.

“Walking my beat alone one day, I thought of a book I had recently read for one of my classes. It was James Baldwin’s, Nobody Knows My Name.[1] Baldwin gave a stunning account of being black in America… [a statement] I remember even to this day. According to Baldwin, the white police officers he knew had to walk in twos and threes in his neighborhood. They had to do so for safety reasons. They couldn’t walk alone because, Baldwin said, the only thing police knew to swing in Harlem was a nightstick. I didn’t want that to be me.”

It no more strongly applies than it does today. Closer is always better.


[1] James Baldwin. Nobody Knows My Name. New York: Dial Press. 1961.



from Improving Police https://ift.tt/2JihJ1B

Tuesday, April 3, 2018

Finding Metasploit’s Meterpreter Traces With Memory Forensics

by Oleg Skulkin & Igor Mikhaylov Metasploit Framework is not only very popular among pentesters, but is also quite often used by real adversaries. So why is memory forensics important here? Because Meterpreter, for example – an advanced, dynamically extensible Metasploit payload – resides entirely in the memory and writes nothing to the victim’s drive. In this article we will show you how to use the Volatility Framework to find Metasploit traces with memory forensics. As we are analyzing a memory image, first of all we should gather information about the operating system to choose the right Volatility profile. If you ask us, the best practice here is to document the OS version during memory imaging process, as Volatility does not always detect it correctly. Anyway, if you get the memory image from the third party and the OS version is unknown, use the imageinfo plugin. Read More

from Forensic Focus https://ift.tt/2H5u5JE

Monday, April 2, 2018

2018 Nuix Insider Conference Recap

by Jessica Lyford Close to 300 customers, partners, and guests converged at the Royal Lancaster London for Nuix’s annual Insider Conference last week to share their experience using Nuix or to learn something new to address their data, cybersecurity, risk, and compliance challenges. The scale of this year’s event symbolizes Nuix’s growth within the region, reflecting incredible growth within the region and globally. The agenda was ambitious and offered something to pique everyone’s interest. The event kicked off with four keynote speakers before the bulk of the day was split into hands-on labs and sessions, which were divided into tracks for corporate, government, and law enforcement attendees. The day wrapped up with a lively customer panel, with panelists discussing current events and the best practices they’ve employed within their enterprises. Read More

from Forensic Focus https://ift.tt/2GuaC4d

Educating Police and Its Problems

“The first rule of law enforcement is to go home at the end of your shift. The key principle is officer survival… but it ends up endangering civilians rather than protecting them…”

“[Police education programs] taught disproportionately by retired cops, is designed to promote this. But it ends up endangering civilians rather than protecting them.”

A curious approach to recruitment

“It starts with high-school career fairs and police recruitment videos that show the ‘sexy’ side of the law enforcement — officers dressed in hard body armor crashing through doors at dawn, fast-roping from helicopters, taming riots, and shooting their way out of trouble. This is especially curious given most officers go their entire careers without firing their weapons. But the image attracts a particular type of candidate. PPOE (Professional Police Officer Education) schools then further entrench this by teaching officers to be afraid; telling them that policing is an incredibly dangerous profession.

“The fact is policing is not especially dangerous, compared to say, work in logging or construction, or driving a taxi, according to the Bureau of Labor Statistics. Since the 2000s, crime has declined and with it the risk of line of duty deaths. Indeed, police officers are many times more likely to commit suicide than to be killed by a criminal. But instructors teach what they know (or were themselves taught), perpetuating the 1990s ‘warrior’ culture of policing that paints police officers as soldiers at ‘war’ with crime, drugs, and criminal gangs. This, in turn, contributes to implicit biases that associate danger with young black men and reinforce the myth of the ‘righteous kill,’ thus shootings that were most likely avoidable.

“Officers are conditioned to view every encounter as a potential deadly force incident. Admittedly, it’s a reasonable expectation in a conceal carry state like Minnesota. Not every Minnesotan is armed, but potentially they are. Likewise, not every Minnesotan is dangerous, but because they’re potentially armed, or, in the tragic case of Philando Castile, definitely armed, it’s better to be safe than sorry. In this context, treating everyone with fairness and respect (what criminologists call ‘procedural justice’) comes second to putting hands in pockets or pulling the trigger. PPOE students complete about 50 hours of firearms training on average but only five hours of de-escalation conflict resolution training, most of which is classroom-based and focuses on the ‘letter of the law,’ not the nuances of mental illness and other concerns…

“It’s time to rethink our system of police education and training. You would think that after 40 years, if our one-of-a-kind system was so good, other states might have adopted it. But no, Minnesota is alone in this experiment. The lack of racial and ethnic diversity in Minnesota law enforcement and the continued deaths of black men in police custody suggest the experiment has failed.”


 James Densley, Ph.D., is an associate professor of criminal justice at Metropolitan State University and author of “Minnesota’s Criminal Justice System” (Carolina Academic Press, 2016). He holds a doctorate in sociology from the University of Oxford.

 



from Improving Police https://ift.tt/2uEe0YN