10
12
14
18
22
FROM THE EDITOR
iCloud Hacked!?!
Christa Miller
Understanding Malware
Cindy Murphy
Using Metadata in Litigation
Gary Torgersen
Recovering Evidence from SSD Drives: Understanding TRIM,
Garbage Collection, and Exclusions
Yuri Gubanov and Oleg Afonin
Book Excerpt: Checklist: Building a Penetration Testing Lab
Bruce Middleton
Digital Forensic Issues
Data Storage Issues: Part 4
John J. Barbara
21 Products 24 Tips 26 DFI Online departments
DFI News Digital Forensic Investigator® is a registered trademark of Vicon Business Media, Inc. a subsidiary of Advantage
Business Media, 100 Enterprise Drive, Suite 600, Box 912, Rockaway, NJ 07866-0912. All rights reserved under the U.S.A.,
International, and Pan-American Copyright Conventions. No part of this publication may be reproduced, stored in a retrieval system,
or transmitted in any form or by any means, mechanical, photocopying, electronic recording or otherwise, without the prior written
permission of the publisher. Opinions expressed in articles are those of the authors and do not necessarily reflect those of Vicon
Business Media Inc. or the Editorial Board.
Subscription Inquiries/Change of Address: contact: Omeda Customer Service, P.O. Box 3574, Northbrook, IL 60065-3574,
Phone: 847-559-7560, Fax: 847-291-4816, email: abdfi@omeda.com. Change of email address notices should include old as
well as new email address. Allow 8 to 10 weeks for email address change to become effective. Subscriptions are free to qualified
individuals.
Notice to Subscribers: We permit reputable companies to send announcements of their products or services to our subscribers.
Requests for this privilege are examined with great care to be sure they will be of interest to our readers. If you prefer not to receive
such mailings, and want your name in our files only for receiving the digital edition, please write us, enclosing your current email
address. Please address your request to Omeda Customer Service, P.O. Box 3574, Northbrook, IL 60065-3574.
Advertiser Index
Berla Corp ......................................... 2 ............................. www.berla.co
Cellebrite USA Corp........................... 28 ................... www.ufedseries.com
C YTECH ........................................... 23 ........................ www.C YFIR.com
Fernicoxxxxxxxxxxxxx
4 www.DFInews.com
Group Publisher
631-241-6161
liz.vickers@advantagemedia.com
Patrice Galvin
Editorial Director
973-920-7652
patrice.galvin@advantagemedia.com
EDITORIAL
Rebecca Waters
Editor-in-Chief
973-920-7748
rebecca.waters@viconmedia.com
Ernest Austin
Newsletter Editor
ernest.austin@viconmedia.com
EDITORIAL ADVISORY BOARD
John J. Barbara Digital Forensics Consulting, LLC
Don Lewis, Lakewood Police Department
Chet Hosmer, Wetstone Technolgies, Inc.
ART AND PRODUCTION
Eileen Whitmore
Art Director
eileen.whitmore@advantagemedia.com
Susan Frank
Production Manager
973-920-7158
susan.frank@advantagemedia.com
ADVERTISING SALES
Patty Grogis
Sales Manager
973-920-7658
patty.grogis@viconmedia.com
REPRINTS/EPRINTS
For reprints and permissions, contact The YGS Group
(800) 501-9571 or ViconReprints@the YGSgroup.com
CUSTOMER SERVICE
ABFOR@Omeda.com • 847-559-7560 •
FAX 847-291-4816
New subscriptions, renewals, changes of address,
back isues, and all customer service questions
List Rentals
Infogroup Targeting Solutions
Senior Account Manager, Bart Piccirillo,
402-836-6283; bart.piccirillo@infogroup.com
Senior Account Manager, Michael Costantino
402-863-6266; michael.costantino@infogroup.com
VICON BUSINESS MEDIA, INC.
a subsidiary of Advantage Business Media
199 Route 101, Bldg #7,
PO Box 779 • Amherst, NH 03031
Phone 973-920-7000 Fax: 603-672-3028
EXECUTIVE OFFICE
ADVANTAGE BUSINESS MEDIA
100 Enterprise Drive, Suite 600
Rockaway, NJ 07866-0912
Phone: 973-920-7000 • Fax: 973-920-7541
Jim Lonergan
CEO
Terry Freeburg
COO/CFO
Cellebrite USA Corp..................... 28.............. www.ufedseries.com
CRU-DataPort ............................... 3 .................... www.cru-inc.com
Fernico ....................................... 2 ................... www.fernico.com
Guidance Software Inc .................. 7 ....... www.encase.com/tableau
Paraben Corporation..................... 5 ................. www.paraben.com
Slient Shield ................................ 27 .......... www.CatieOnline.Com