S2E5: Digital Evidence Update: What’s New in Computer Forensics

 

Data Discourse returns with hosts Pete Mansmann and Jeff Stiegler delivering a timely update on digital forensics and e-discovery trends shaping today’s legal and investigative landscape. In this episode, they unpack how evolving security features, encryption standards, and AI-generated content are redefining digital evidence collection, analysis, and authentication strategies.

This in-depth discussion explores how modern devices (especially smartphones) have become privacy-first ecosystems, complicating traditional forensic data extraction methods. From biometric locks and secure folders to device states like BFU (Before First Unlock) and AFU (After First Unlock), Pete and Jeff explain why digital forensics now requires negotiation with technology rather than simple access.

They also examine the growing challenges surrounding deleted data recovery, encrypted storage, and cloud-based evidence within platforms such as Microsoft OneDrive, Microsoft Teams, and Google Workspace. As email “attachments” increasingly become cloud-hosted links rather than embedded files, legal teams must expand discovery strategies to include communications, cloud repositories, and app-based data sources.

Pete and Jeff also cover the impact of artificial intelligence on digital evidence authenticity, emphasizing the growing difficulty of verifying AI-generated images, videos, and documents. They underscore the importance of early expert consultation, realistic expectations about recoverability, and human-led verification processes in an era where digital evidence is more complex AND more critical than ever.

Key Takeaways:

  • Digital forensics and e-discovery methods must continuously adapt to evolving device security and encryption technologies.
  • Mobile devices now prioritize privacy, making full data extraction more difficult – even with legal authorization.
  • Deleted data recovery on modern SSDs and smartphones is increasingly unreliable due to encryption and TRIM technology.
  • Cloud storage and collaboration platforms require expanded discovery strategies beyond traditional email collection.
  • AI-generated content raises significant authenticity and verification challenges in legal proceedings.
  • Early collaboration with digital forensics experts is essential for managing risk, cost, and evidentiary expectations.

Connect with Jeff Stiegler:

LinkedIn

Click on any platform below to subscribe and never miss an episode!

     

Leave a Comment

Your email address will not be published. Required fields are marked *