Computer Forensics Africa

Computer Forensics Africa We are a forensics organization based in Nairobi Kenya. We serve our clients within Africa through our professional associates. Service Through Trust

We are a pan African digital risks consulting agency based in Nairobi Kenya. We have professional associates all over Africa. We deliver on promise. Our service portfolio are as follows:

Computer Forensic Investigation

Investigation of computer related crimes

Training of forensics professionals

Computer Forensic solutions are as follows:

Internet Defamation
Businesses are now getting attacked

at an alarming rate by competitors, ex-employees, and highly agitated past clients. A single person and a laptop can now bring a business to its knees in a single day by posting defamatory information all over the web. If this is your situation, we can rapidly help you regain control and solve these issues. Digital Forensics
Digital forensics is the science involving the recovery and investigation of material found in digital devices, often in relation to computer crime. This involves the forensic imaging (acquisition) and analysis of digital media either on-site or via remote access. CFK can rapidly, and cost effectively help you with your forensic needs in a rapid response manner. Incident Response
Inside of your business, you probably have a group of people who prepare for and respond to an interruption of business operations due to internet or cyber attacks. Most companies find, however, that cyber incidences are usually best responded to by a collection of skills involving internal and external rapid response teams. Let CFK be your one stop partner. Litigation Support

Much of our work results in either the criminal prosecution or in the filing of litigation against the perpetrators of cyber attacks. Our investigation team works daily with attorneys on our client’s team or with federal, state, or local law enforcement. Unlike most “digital” companies, CFK is built upon a law enforcement & investigatory backgrounds. Importance of the Forensic Specialist

The electronic-discovery process involves complex data manipulation and reduction utilizing sophisticated software tools and techniques. However, technology and tools are necessary but not sufficient for success. The result that is achieved is only as good as the quality and experience of the forensic expert assigned to the case. Computer Forensics Kenya is expert at electronic discovery and has years of experience investigating complex cases. We have a knack for finding the key evidence needed to win.

We applaud Directorate of Criminal Investigations - DCI for this great achievement of officially launching the National ...
17/06/2022

We applaud Directorate of Criminal Investigations - DCI for this great achievement of officially launching the National Forensics Lab.

The East Africa region will benefit from this resource.

We will continue to provide hands on training on forensics in the region.

08/11/2021

We are providing weekly digital forensics and documents examination training and capacity building to the prospective students and upcoming professionals within East African region.

To participate kindly send an email to [email protected]

Computerized Electronic Evidence Analysis

17/04/2018
27/11/2017

Registration for the meet-up happening on 1st December 2017

Documents / Signature Analysis:We have the best expertise to assist you in analyzing your documents.Some of these docume...
09/10/2017

Documents / Signature Analysis:

We have the best expertise to assist you in analyzing your documents.
Some of these documents are as follows:
1. Signature analysis on forgeries cases / disputed signatures / fake signatures (Title deed and important documents)

2. Hand writing analysis on forgeries and disputed hand writing

3. Stamps analysis / disputed stamps (Misused stamps especially in banks and Saccos by tellers)
4. We also provide training on documents analysis using state of the art tools.

Hire us today to guide you through the analysis and professional report. We also have expert witness for your court sessions.

Call / SMS: +254 788 827 759

Website:

Computer Forensic Kenya is a digital forensics and cybersecurity consulting group with head office in Nairobi Kenya. We operate all over Africa through our associates network in most of African countries.

18/09/2017

We have a digital forensics examination test detailed below. You are allowed to share and discuss:

The Rhino Hunt data set requires examination of a small image file and three network traces.

This image was contributed by Dr. Golden G. Richard III, and was originally used in the DFRWS 2005 RODEO CHALLENGE.

Scenario:

The city of New Orleans passed a law in 2004 making possession of nine or more unique rhinoceros images a serious crime. The network administrator at the University of New Orleans recently alerted police when his instance of RHINOVORE flagged illegal rhino traffic. Evidence in the case includes a computer and USB key seized from one of the University’s labs. Unfortunately, the computer had no hard drive. The USB key was imaged and a copy of the dd image is on the CD-ROM you’ve been given.

In addition to the USB key drive image, three network traces are also available—these were provided by the network administrator and involve the machine with the missing hard drive. The suspect is the primary user of this machine, who has been pursuing his Ph.D. at the University since 1972.

MD5 hashes for evidence:

c0d0093eb1664cd7b73f3a5225ae3f30 *rhino.log
cd21eaf4acfb50f71ffff857d7968341 *rhino2.log
7e29f9d67346df25faaf18efcd95fc30 *rhino3.log
80348c58eec4c328ef1f7709adc56a54 *RHINOUSB.dd

The image and trace files are located here: www.computerforensickenya.com/tests/DFRWS2005-RODEO.zip.

The task:

Recover at least nine rhino pictures from the available evidence and include them in a brief report. In your report, provide answers to as many of the following questions as possible:

Who gave the accused a telnet/ftp account?
What’s the username/password for the account?
What relevant file transfers appear in the network traces?
What happened to the hard drive in the computer? Where is it now?
What happened to the USB key?
What is recoverable from the dd image of the USB key?
Is there any evidence that connects the USB key and the network traces? If so, what?

All the best as you try this out.

30/08/2017
28/06/2017

Documents Examination at CFK:

Forensic document examiners, also often referred to as questioned document examiners, are forensic scientists who are responsible for using a number of scientific processes and methods for examining documents—whether written, typed, or printed—related to a crime scene investigation.

Forensic document examiners, on the other hand, are skilled forensics scientists with a demonstrated expertise in applied questioned document examination. They are handwriting experts, as well as experts in other areas of document examination, including machine printing processes; and obliterated, indented and erased entries.

Definition of a Document

A document may be broadly defined as anything that bears marks, signs, or symbols which have meaning or conveys a message to someone.

CFK document examiners perform the following:

Examine documents for signs that they have been forged or altered
Compare signatures and handwriting through handwriting analysis to determine the authorship of documents
Examine typed documents and link them to specific machines or computers (printing process examinations)
Decipher the contents of documents that have been partially destroyed or altered
Compare fractured or cut-edge comparisons on a variety of surfaces, including paper and tape
Examine incidents of indented writing
Perform alternate light source examinations to determine ink discrimination, alterations, and/or enhancements

Handwriting Identification

Handwriting identification is based on the principle that, while handwriting within a language tends to be alike to the degree that we can meaningfully read it, there are individual features that distinguish one person's writing from that of another. Just as no two people are exactly alike, the handwritings of no two people are exactly alike in their combination of characteristics. There are, of course, natural variations within the handwriting of each individual. These variations must be closely and carefully studied by the examiner, so that he can distinguish between what is a "variation" and what is a "difference".

The examiner must also be cognizant of the differences between "class characteristics" and "individual characteristics". Class characteristics are those which are common to a group such as a particular writing system, family grouping, foreign language system, or professional group. Individual characteristics are those which are personal or peculiar letters or letter combinations, which, taken together, would not occur in the writing of another person.

Handwriting identification is a comparison study requiring authenticated specimens of known handwriting from the individual(s) concerned. These are closely compared to the handwriting characteristics exhibited by the questioned writing in order to determine authorship. Like must be compared to like: printing to printing and cursive to cursive, with comparable letters, letter combinations, words, and numerals.

Forgery

Below are the classes of forgery commonly encountered:

No attempt is made by the forger to imitate the genuine signature of the person purportedly signing the document.
There is an attempt to imitate the genuine signature by some method of tracing of a model signature.
There is a freehand attempt to simulate the genuine signature from a model.
The document and the purported signer are fictitious.
A "cut & paste" job wherein a genuine signature, or copy thereof, is transferred from some authentic source to a fraudulent document.

Other disputed signatures include those which are genuine but which were disguised, or written in some illegible manner, by the writer for the purpose of later deniability; and signatures which, though genuine, the author either has no memory of executing or is unwilling to accept as genuine.

It is possible for the document examiner to identify a document or signature as a forgery, but it is much less common for the examiner to identify the forger. This is due to the nature of handwriting in that, while the forger is attempting to imitate the writing habit of another person, the forger is, at the same time, suppressing his own writing habit, thereby disguising his own writing.

In attempting to either disguise one's own writing or imitate that of another, the briefer the body of writing the easier it is to continue the disguise. As the writing becomes more extended, the greater the probability that one's own subconscious habit will intrude itself into the disguise attempt.

There are no reliable methods of predicting from the writing whether the author was male or female, or right-handed or left-handed.

Identification of Typewriters and Checkwriters

With regard to typewriters, questions arise as to whether a series of documents were prepared on the same typewriter; what make/model of typewriter was used; or when was the typed document produced?

Typewriters are identifiable as to make and model by means of class characteristics such as manual/electric, fabric ribbon/carbon film ribbon, typebars/daisywheel/ball element, typeface design, and so on. Machines may acquire individualizing characteristics to varying degrees due to use or misuse, damage, and general wear. The degree of success in a given case will vary with the type of machine with which the examiner is faced.

Check writers, also known as check protectors, may be identified as to manufacturer by its mechanism and typeface design, and individualized by accidental characteristics resulting from damage and wear and tear.

Identification of Indented Writing

Indented writing is an imprint which may be left on the underlying pages when the top sheet of paper is written upon. This impression of the writing is influenced by pen pressure and thickness of the paper. Indented writing is very useful as a form of connecting evidence, such as tying a robbery note to a writing pad recovered from a suspect. Classically, indented writing was identified and deciphered by means of low angle oblique light and photography. More recently, an instrument known as an Electrostatic Detection Apparatus, or ESDA, is now used to produce a visual image of the indented writing on transparency film. This procedure is non-destructive, and rather non-detectable.

Collecting the Known and Unknown

When conducting examinations, forensic document examiners must have known specimens to which they compare the material in question. These samples may come from any number of known sources, such as a particular ink manufacturer or machine.

In cases involving handwriting, samples are usually divided into two types: requested writing specimens and collected writing specimens. Requested specimens are writings dictated by the investigator to the writer. These specimens are created under carefully controlled conditions, with the writer being closely monitored. Collected writing specimens, however, are writings that were completed by the subject prior to the investigation. Good sources of writing specimens may include items such as cancelled checks, letters, diaries, signed receipts, medical records, real estate contracts, tax records or other signed legal documents.

Talk to us today for exceptional services in handwriting analysis and documents examination

Cell: +254 788 827 759

Address

Nairobi
20100

Alerts

Be the first to know and let us send you an email when Computer Forensics Africa posts news and promotions. Your email address will not be used for any other purpose, and you can unsubscribe at any time.

Share