Federal Agencies

Today’s investigations often involve multiple machines and devices.  It can be time consuming to image and process several computers, external hard drives, and other media...

As Windows has evolved over time several artifacts have appeared that can highlight when programs or applications were executed, and which user executed them.  The...

By Stephanie Thompson, Solutions Engineer With the recent news of BlackBag joining Cellebrite, it seems like the appropriate time to share what we can already do...

Introduction Hello everyone! I’m Dr. Vico Marziale (@vicomarziale), Senior Digital Forensics Researcher here at BlackBag. In this installment, I’d like to start a series of posts...

By: Bruce Hunter, Senior Forensic Engineer With the release of macOS 10.12 Sierra, Apple introduced a new form of logging referred to as Unified Logs.  These...

By: Justin Matsuhara, Team Lead, Solutions Engineer & Stephanie Thompson, Solutions Engineer Depending on the digital forensic imaging tool you have available, creating a forensic image...

BlackBag’s Partnership With Berla Expands Your Analysis Environment In today’s investigations, it is now commonplace to have multiple digital devices associated to one case. As such,...

BlackBag Technologies announces a new partnership with industry-leading vehicle forensics company, Berla. In today’s investigations, it is now commonplace to have multiple digital devices associated to...

Best practices require that when creating a forensic image of a computer, or other digital media used with a computer, a write-blocking device should be...

By: Stephanie Thompson, Solutions Engineer While the amounts of data in typical digital forensic cases today is a lot different than it was several years ago, the...