Forensically Preserving Facebook Content – Challenges and Guidelines

Social media has become a notable source of potential forensic evidence, with social media giant Facebook being a primary source of interest. With over 1.35 billion monthly active users as of September 30, 2014 [1], Facebook is considered the largest social networking platform. Kivu is finding that forensic collection of Facebook (and other sources of […]

Using Web Pages in Forensics Investigations

Internet technology provides a substantial challenge to the collection and preservation of data, metadata (data that describes and gives information about other data) in particular. This blog post from Kivu will explain the factors to consider in using web pages in forensics investigations. The challenge stems from the complexity of source-to-endpoint content distribution. Originating content […]

Using Gmvault to Retrieve and Store Gmail Messages for Forensic Investigation

The cloud is becoming an ever-increasing repository for email storage. One of the more popular email programs is Gmail, with its 15 GB of free storage and easy access anywhere for users with an Internet connection. Due to the great number of email accounts, the potential for large amounts of data, and no direct income, […]

Gambling with InfoSec in the Cloud

The enduring onslaught of data breach events such as the theft of 4.5 million health records from Community Health Systems or the recent staggering loss of information for 76m JP Morgan accounts continues to highlight the need for robust information security and the ability to proactively prevent and redress potential security incidents. In response, organizations […]

Cyberization – The Aggregation of Cyber Risk

The financial industry has long been known for “repackaging risk” – slicing and dicing investments to lessen their aggregate risk. During the 2008 subprime mortgage crisis, the repackaging process eventually reached the point where no one knew the real financial risk, who exactly was exposed to it, and where and how the risk was concentrated. […]

What Is the Wayback Machine And How Does It Work?

The Wayback Machine is a digital archive of Internet content, consisting of snapshots of web pages across time. The frequency of web page snapshots is variable, so all web site updates are not recorded.There are sometimes intervals of several weeks or years between snapshots. Web page snapshots usually become available and searchable on the Internet […]

Ten Common Computer Security Misconfigurations – Here’s What to Avoid

Cyber incidents and data breaches are often the result of computer security misconfigurations in a system’s network or software. We have found at Kivu Consulting that many of the same misconfigurations have allowed an intrusion to happen, an exploit to be executed or data to be extracted from a particular system. Security misconfigurations can also […]

How Small Businesses Get Hacked – What Hackers Don’t Want You to Know

Many small-to-medium (SMB) size business owners believe that they aren’t important or large enough to be targeted by hackers. Unfortunately, we have found at Kivu Consulting that’s not the case. Smaller companies in general have fewer resources to spend on defending their networks, yet they have substantial assets that hackers can take. As larger organizations […]