IoT Forensics: A Look At What This All Means
Special guest: Jean Costello – DFIR Consultant, RJC Ventures, LLC
IoT Forensics is becoming a more common topic among forensic examiners. In this episode, Jean will answer the following questions:
- Why is IoT Forensics important to forensic examiners?
- How can we learn more about it?
Jean is a digital forensics consultant. She first started out as an auditor, then switched to Information Technology as a result of doing more IT audits. She began taking a lot of IT training, was a programmer for a number of years, and worked her way up to a Project Management Professional (PMP).
When looking for a new challenge, she went into digital security in 2012 and started working for the Transportation Security Administration (TSA) at their forensics lab. After this, she worked for Booz Allen Hamilton, where she served many federal clients and forensics labs.
When later working for eBay, she helped build out their forensics lab and expanded their capabilities in California. Recently, she spent several months converting her digital forensics thesis on IoT Forensics into a training course to help the DFIR community.
While doing her masters, her focus was on finding lost and kidnapped children by leveraging digital evidence from IoT devices and amber alerts. But as she learned more about IoT, she understood this methodology could be expanded for use in many different types of crimes. One of her appendices showed real-life examples of homicides and arson where various IoT devices were the key evidence sources for solving the case.
Listen to the podcast to hear Jean explore the IoT architectures, their challenges, and how digital evidence is collected.