Digital forensics helps make companies more resilient

Digital forensics expert Stanoje Rnić, founder of the Archibald Digital Forensics Initiative and CEO of Archibald Intelligence, delivered a presentation on the role of digital forensics in strengthening corporate resilience. The topics included key methods in investigating cybercrime and protecting company systems, with the audience able to learn more about the role of digital forensics in enhancing corporate security.

Citing practical examples Mr. Rnić explained the four most common types of cybercrime, namely investment scams, phishing attacks, hacking incidents, and data breaches. He placed special emphasis on cryptocurrency threats, highlighting the importance of safeguarding “seed phrases”, sequences of random words that store the data required to access or recover cryptocurrency. If an attacker learns the seed phrase, they can take complete control of a cryptocurrency wallet.

Mr. Rnić also showcased three-stage digital forensics methodology that comprises the initial contact phase, forensic investigation proper, and reporting. Any cyberattack assessment relies on tools such as domain name server (DNS) analysis, which helps track domain redirects, user-agent string analysis, which allows identification of devices used in a cyberattack and their operating systems, and Base64 decoding, used to bypass a masking technique intended to make it more difficult to identify data for analysis.

The presentation also highlighted the importance of source IP address analysis, which allows tracking would-be attackers and identifying locations from which attempted attacks are launched. Source code analysis can help identify system vulnerabilities and methods employed by attackers.

Mr. Rnić underscored the significance of digital forensics in investigating cyberattacks and protecting businesses, emphasizing the need for continuous education and improvement of security practices.

See photos from the event here.