Matt McFadden

Digital Forensics, Middle Blocker, Retired Police Sergeant, Volleyball Coach

[BerlaCorp @BerlaCorp]

Join us for our next INSIGHTS Broadcast! We will share the tools and equipment being used throughout the chip-off course. Plus, we will unveil an innovative new feature to support the probe station, announce our first giveaway of the year, and more! #DFIR https://t.co/4qARIy9NLn

[BerlaCorp @BerlaCorp]

Join us for our next INSIGHTS Broadcast! We will walkthrough details of a newly supported system and highlight key features added in version 4.7 of iVe. Also, we will share more information on our highly anticipated chip-off course! #DFIR https://t.co/yMdHsdD6EF

[BerlaCorp @BerlaCorp]

Join us for our first official INSIGHTS Broadcast! Get an early look at a new acquisition workflow and learn about the upcoming supported system. Also, discover how our new probe station will enhance ECU support and speed up your investigations! https://t.co/TBOoYptvFS

[BerlaCorp @BerlaCorp]

iVe v3.3 introduced the ability to animate tracklogs in iVe Desktop! This allows you to play back a tracklog to easily identify timing, locations visited and visualize sequences of events as they unfolded. This weeks featured blog explains more! Read on: https://t.co/F0OIL9JnOF

[BerlaCorp @BerlaCorp]

We're excited to announce the release of #iVe v3.3 introducing support for Mazda and Scion, and additional support for Toyota. Along with these newly supported systems comes the addition of a highly requested analysis feature, tracklog playback! Learn more https://t.co/10SS5OFdBO

[Matt McFadden @cybr4n6]

@Sightdark1 @BerlaCorp Affirm! Joined the Berla Team in late March :) I hope all has been good.

[Matt McFadden @cybr4n6]

Hands-on system removal about to commence by investigators in our Vehicle System Forensic Training Program - Annapolis, MD @BerlaCorp

[Matt McFadden @cybr4n6]

@i_am_the_gia Siri doesn't like filtering, sorting, and searching through 15+ million record entries??? She is missing out on all the #DFIR fun!

[Matt McFadden @cybr4n6]

Apple® M1 Computer data acquisition challenges in part of today's virtual lecture with Zagreb University of Applied Sciences (Tehničko veleučilište u Zagrebu) Great day working with great colleagues! @INsig2_Ltd @gpstcu @blackbagtech @Cellebrite_UFED (Image from prior travel)

[Matt McFadden @cybr4n6]

Students at Zagreb University of Applied Sciences working w/ @gpstcu & I along with our great colleagues at @INsig2_Ltd to learn Mac Exams. This project is funded by the Ministry of Science and Education through European Social Fund (ESF) grants. @blackbagtech @Cellebrite_UFED

[Matt McFadden @cybr4n6]

New Timeline view yielding valuable insights by allowing quick filtering to correlate data across TONS of artifacts. Interface provides full visibility with the parsed data values, source, & even the structure of the source entry. BlackLight 10.2 @blackbagtech @Cellebrite_UFED

[Matt McFadden @cybr4n6]

Filter often, but cautiously. Examine thoroughly. BlackLight's simple to advanced filters are easily created allowing varied logic groupings. Our courses teach forensic analysis techniques so you can maximize your case analysis proficiency. @blackbagtech @Cellebrite_UFED

[Matt McFadden @cybr4n6]

Appears as a folder to the user and may within forensic software, but what is this? Knowing your evidence will help you understand how the operating and file systems work so you know the source of the data to explain the existence of this entry. @blackbagtech @Cellebrite_UFED

[Matt McFadden @cybr4n6]

Windows Timeline indicating hex editor launched to access a torrent file followed by an entry showing BitTorrent client application continuing - case insights revealed easily from activitiescache.db with BlackLight. Windows Forensic Investigations @blackbagtech @Cellebrite_UFED

[Matt McFadden @cybr4n6]

Possible indicator of system compromise by registry autostart revealed, target file analyzed to confirm, date/time analysis, & VSC data scan - all quickly in BlackLight for an easy view of parsed data or the ability to validate the source & data structures yourself. @blackbagtech

[Matt McFadden @cybr4n6]

@LukeTheSky It is likely possible with a work around, but not supported.

[BlackBag @blackbagtech]

Enhance your digital intelligence skills from your own home, on your own time. Watch this quick 90 second on how to get started with our online training courses and learn more here: https://t.co/uIBZIAClv5

[Matt McFadden @cybr4n6]

Proudly serving U.S. government agencies, numerous local police depts, a national laboratory, a hospital, & a science foundation in our Basic, Apple®, and Advanced Apple® Forensic Investigation courses live online & onsite this week. Stay safe & examine thoroughly! @blackbagtech

[Matt McFadden @cybr4n6]

Being timely, yet thorough in your forensic analysis is always the challenge. Parsed data support & access to the source of the evidence is vital. Analyzing parsed SRUDB.dat records today to determine an application's network data usage by sending & receiving bytes @blackbagtech

[Matt McFadden @cybr4n6]

The responsibility is your's. Locating & explaining digital evidence in criminal & corporate investigations is vital to reveal the truth. Do you know your evidence? Do you trust, but verify your findings? Do you want to know more? https://t.co/eH41CjIKSf @blackbagtech