Web Content Management Systems: An Analysis of Forensic Investigatory Challenges

With an increase in the creation and maintenance of personal websites, web content management systems are now frequently utilized. Such systems offer a low cost and simple solution for those seeking to develop an online presence, and subsequently, a platform from which reported defamatory content, abuse, and copyright infringement has been witnessed. This article provides an introductory forensic analysis of the three current most popular web content management systems available, WordPress, Drupal, and Joomla! Test platforms have been created, and their site structures have been examined to provide guidance for forensic practitioners facing investigations of this type. Result's document available metadata for establishing site ownership, user interactions, and stored content following analysis of artifacts including Wordpress's wp_users, and wp_comments tables, Drupal's “watchdog” records, and Joomla!'s _users, and _content tables. Finally, investigatory limitations documenting the difficulties of investigating WCMS usage are noted, and analysis recommendations are offered.     

Development of a human-specific real-time PCR assay for the simultaneous quantitation of total genomic and male DNA

A duplex real-time quantitative PCR assay was developed for forensic DNA analysis, which provides simultaneous quantitation of total genomic human DNA and human male DNA. The assay utilizes two spectrally resolved fluorogenic probes in a 5' nuclease (TaqMantrade mark) assay. Within the range of organisms empirically tested and based upon theoretical specificity using National Center for Biotechnology Information GenBank sequences, primer and probe sequences were shown to be human specific, and the Y-chromosome probe, male-specific. A mixture-challenge study resulted in accurate quantitation of 25 pg male DNA in a mixture of up to 1:5000 (male:female DNA). Additional experimental results include comparisons with the slot blot method and commercial real-time PCR kits. The assay developed addresses the shortcomings of the traditional slot blot method as well as the commercial real-time PCR kits. This method is shown to be specific, relatively simple, rapid, has low limits of detection, and consumes limited sample in addition to reporting both the male and total genomic DNA concentrations present.     

Women employment in colonial Hong Kong

Women's participation in the labour market is on the rise, and employment opportunities available to working women have increased greatly. However, working women in Hong Kong are still disproportionately underrepresented in higher status occupations. Despite general improvement in their educational attainment, women are still unequally paid. Their role in the workplace is still very much constrained and impeded by their familial role. Hong Kong women's continuing subordination in the workplace lies in the domination of the Chinese patriarchal family in industrial Hong Kong. Women experience institutional discrimination insofar as other institutions and the public at large also subscribe to culturally entrenched prejudices and discriminatory practices against women. It appears that women's subordinate status will not change in the foreseeable future.     

Forensic DNA analysis on microfluidic devices: a review

The advent of microfluidic technology for genetic analysis has begun to impact forensic science. Recent advances in microfluidic separation of short-tandem-repeat (STR) fragments has provided unprecedented potential for improving speed and efficiency of DNA typing. In addition, the analytical processes associated with sample preparation--which include cell sorting, DNA extraction, DNA quantitation, and DNA amplification--can all be integrated with the STR separation in a seamless manner. The current state of these microfluidic methods as well as their advantages and potential shortcomings are detailed. Recent advances in microfluidic device technology, as they pertain to forensic DNA typing, are discussed with a focus on the forensic community.     

A review of quality procedures in the UK forensic sciences: What can the field of digital forensics learn?

With a reliance on the various forms of forensic science evidence in complex criminal investigations, the measures for ensuring its quality are facing increasing scrutiny. Improvements to quality management systems, to ensure both the robust application of scientific principles and the accurate interpretation and reporting of results, have arisen as a consequence of high-profile rebuttals of forensic science evidence, combined with process improvements driven by evaluation of current practice. These improvements are crucial to ensure validity of results as well as providing assurance for all those involved in the Criminal Justice System. This work first examines the quality management systems utilised for the examination and analysis of fingerprint, body fluid and DNA evidence. It then proceeds to highlight an apparent lack of comparable quality assurance mechanisms within the field of digital forensics, one of the newest branches of forensic science. Proposals are provided for the improvement of quality assurance for the digital forensics arena, drawing on the experiences of, and more well-established practices within, other forensic disciplines.     

A Forensic Examination of Online Search Facility URL Record Structures

The use of search engines and associated search functions to locate content online is now common practice. As a result, a forensic examination of a suspect's online search activity can be a critical aspect in establishing whether an offense has been committed in many investigations. This article offers an analysis of online search URL structures to support law enforcement and associated digital forensics practitioners interpret acts of online searching during an investigation. Google, Bing, Yahoo!, and DuckDuckGo searching functions are examined, and key URL attribute structures and metadata have been documented. In addition, an overview of social media searching covering Twitter, Facebook, Instagram, and YouTube is offered. Results show the ability to extract embedded metadata from search engine URLs which can establish online searching behaviors and the timing of searches.     

Loose‐Lipped Mobile Device Intelligent Personal Assistants: A Discussion of Information Gleaned from Siri on Locked iOS Devices

The forensic analysis of mobile handsets is becoming a more prominent factor in many criminal investigations. Despite such devices frequently storing relevant evidential content to support an investigation, accessing this information is becoming an increasingly difficult task due to enhanced effective security features. Where access to a device's resident data is not possible via traditional mobile forensic methods, in some cases it may still be possible to extract user information via queries made to an installed intelligent personal assistant. This article presents an evaluation of the information which is retrievable from Apple's Siri when interacted with on a locked iOS device running iOS 11.2.5 (the latest at the time of testing). The testing of verbal commands designed to elicit a response from Siri demonstrate the ability to recover call log, SMS, Contacts, Apple Maps, Calendar, and device information which may support any further investigation.     

“I couldn't find it your honour,it mustn't be there!” – Tool errors,tool limitations and user error in digital forensics

The field of digital forensics maintains significant reliance on the software it uses to acquire and investigate forms of digital evidence. Without these tools, analysis of digital devices would often not be possible. Despite such levels of reliance, techniques for validating digital forensic software are sparse and research is limited in both volume and depth. As practitioners pursue the goal of producing robust evidence, they face the onerous task of both ensuring the accuracy of their tools and, their effective use. Whilst tool errors provide one issue, establishing a tool's limitations also provides an investigatory challenge leading the potential for practitioner user-error and ultimately a grey area of accountability. This article debates the problems surrounding digital forensic tool usage, evidential reliability and validation.     

The COLLECTORS ranking scale for ‘at‐scene’ digital device triage

As digital evidence now features prominently in many criminal investigations, such large volumes of requests for the forensic examination of devices has led to well publicized backlogs and delays. In an effort to cope, triage policies are frequently implemented in order to reduce the number of digital devices which are seized unnecessarily. Often first responders are tasked with performing triage at scene in order to decide whether any identified devices should be seized and submitted for forensic examination. In some cases, this is done with the assistance of software which allows device content to be “previewed”; however, in some cases, a first responder will triage devices using their judgment and experience alone, absent of knowledge of the devices content, referred to as “decision‐based device triage” (DBDT). This work provides a discussion of the challenges first responders face when carrying out DBDT at scene. In response, the COLLECTORS ranking scale is proposed to help first responders carry out DBDT and to formalize this process in an effort to support quality control of this practice. The COLLECTORS ranking scale consists of 10 categories which first responders should rank a given device against. Each devices cumulative score should be queried against the defined “seizure thresholds” which offer support to first responders in assessing when to seize a device. To offer clarify, an example use‐case involving the COLLECTORS ranking scale is included, highlighting its application when faced with multiple digital devices at scene.