Adventures in Pro Bono Digital Forensics Work
John Bambenek recounts pro bono digital forensics casework, exposing flawed prosecution expert testimony and emphasizing sound forensic methodologies.
Summary
The Power Imbalance in Digital Forensic Justice
In criminal and civil legal disputes, defendants lacking financial resources often cannot afford qualified digital forensics experts to challenge flawed government or prosecution evidence.
Case Studies in Pro Bono Defense Forensics
John Bambenek shares real-world cases where pro bono defense investigations uncovered sloppy forensic analysis, fabricated evidence claims, and misinterpreted log files.
Cautionary Tales of Flawed Forensic Methodologies
Bambenek reviews egregious errors in forensic investigations—including failing to verify file timestamps, misattributing IP addresses, and over-relying on automated tools.
A Call for Pro Bono Community Contributions
The author calls on experienced DFIR practitioners to volunteer their time to ensure equitable access to sound forensic expertise in the legal system.
Related talks
Blue Team Village·32 min
Renzon Cruz
Renzon Cruz investigates host forensic artifacts left by cloud sync clients (OneDrive, Google Drive, Dropbox), tracing insider data exfiltration.
Microsoft Security Response Center (MSRC)·25 min
Autopsies of Recent DFIR Investigations
Engineers explore architecture and security mechanisms for BlueHat Seattle 2019 || Autopsies of Recent DFIR Investigations.
S4 Events·37 min
Industry experts analyze emerging threats surrounding Digital Forensics and Incident Response (DFIR) for ICS Embedded Devices.