Special Guests: Bret Shavers and Eoghan Casey, DFRWS, University of Lausanne

In this episode, Bret and Eoghan will give an update on the DFIR Review Process, which is a community effort. They will cover why it is beneficial and why you should get involved.

Bret will focus on personal and professional benefits while Eoghan will cover the technical and academic aspects.

Bret wrote a pdf doc 10 years ago that he uploaded to Forensic Focus. This was later cited in books, dissertations, and other places, but it was never actually peer-reviewed. From that point, he thought it would be a great idea to have a system where papers can be peer-reviewed so that they become immutable to last longer.

When he wrote his first book, he had linked to certain blog posts. Unfortunately, by the time he finished writing his book many of these posts were no longer active even though the content was of great quality and a valuable reference.

This is the whole crux of the DFIR review process—to establish a repository of references from which materials can be sourced—so that information gleaned can be leveraged in court.

Sample topics of peer-reviewed papers include:

  • Chromebooks
  • Cars
  • Google assistant

Objectives of DFIR Review

Respond to the need for a focal point for up-to-date, community-reviewed, applied research, and testing in digital forensics and incident response. Targeted studies of specific interest include:

  • Devices
  • Digital evidence
  • Analysis methods
  • Criminal activity

This is all volunteer-based at the moment backed by a strong community of practitioners and academics with high-quality knowledge for those who are eager to learn 

Listen to the podcast to find out more about the DFIR Community review process.

Share this post