Solving the Lover, Stalker, Killer Murder with Strings, Grep, and Perl
Goes behind the scenes of a high-profile homicide investigation to show how command-line utilities and digital evidence unmasked an online stalker.
Summary
A Digital Homicide Investigation
Following the disappearance of Cari Farver, an online impostor maintained deceptive digital communications for over three years, using proxies and VPNs to impersonate the victim.
Unmasking Anonymized Digital Traces
Digital forensics investigators untangled extensive layers of anonymizing applications, spoofed email headers, and IP proxy logs to locate the true origin of the communications.
Command Line Forensics with Grep and Perl
Utilizing standard open-source Linux utilities including strings, grep, and bespoke Perl parsing scripts enabled investigators to process vast datasets of raw phone dumps and server logs.
Proving a No-Body Homicide Case
Correlating digital timestamps and forensic artifacts provided the definitive evidentiary trail that proved the homicide in court and secured a criminal conviction.
Related talks
Creator Stage·54 min
Catherine Ullman
Walks through a real-world investigative narrative to show how digital artifacts in system registries fit into broader forensic investigations.
Blue Team Village·46 min
Project Obsidian
Project Obsidian explains forensic preparation and tooling organization to accelerate digital forensics and incident triage workflows.
Black Hat·25 min
Engineers explore architecture and security mechanisms for Fixing a Memory Forensics Blind Spot: Linux Kernel Tracing.