In an era where digital data is increasingly interwoven with any forensic investigation, understanding secure communication, encrypted data transmission, and protected storage is critical for both digital and physical forensic practitioners. While encryption is often viewed as a challenge to forensic investigations, it is also a vital tool for preserving evidential integrity, securing sensitive forensic findings, and ensuring compliance with modern forensic standards.

This hands-on workshop introduces forensic professionals to practical, accessible techniques for leveraging simple and effective encryption will enhance investigative processes without requiring extensive technical expertise.

Participants will learn:

• The Role of Encryption in Forensic Science: How securing digital communications and evidence storage strengthens forensic workflows without compromising accessibility.
• Simple Yet Effective Encryption Techniques: Step-by-step demonstrations of how enhanced encryption can be applied to forensic case files, communication channels, and data repositories using freely available tools.
• Enhancing Evidential Integrity and Chain of Custody: Practical methods for encrypting forensic data to prevent unauthorised access while ensuring admissibility in legal proceedings.
• Through guided exercises, participants will encrypt and decrypt forensic case files, securely transmit sensitive data, and explore how encrypted digital evidence can be validated and accessed within a forensic framework. Real-world case studies will illustrate how forensic professionals across disciplines can benefit from integrating encryption into their existing methodologies.

This workshop is designed to bridge the gap between traditional forensic science and digital forensics, demonstrating how encryption serves as a protective measure rather than an investigative barrier. By equipping forensic practitioners with essential cybersecurity skills, this session ensures that forensic investigations remain secure, resilient, and aligned with modern best practices.

A Workshop on Applications and Interpretation of Apple Health Data in Criminal Investigation

Apple Health Data draws on motion, location and biometric sensors in the Apple iPhone and Apple Watch to log exercise and activity in the Apple ecosystem. Drawing on our operational experience which dates back to the Myrna Nilsson murder (2016) [1] and the doctoral thesis of the lead author [2], we present a workshop and scaffolded online exercise which introduces the structure of the key Apple Health databases healthdb_secure.sqlite and cache_encryptedC.db.

We present some of our validation work, drawing on controlled experiments and the personal health data of one of the authors, collected since 2017 [3].

Along the way, we’ll demonstrate the applications and limitations of health data in criminal investigation.

[1] M. Carter, Caroline Nilsson found not guilty of murdering mother-in-law after smart watch case retrial, ABC News, 26 October 2021.
[2] L. Jennings, On the Forensic Application of Apple Health Data, PhD Thesis, University of Adelaide, 2024
[3] L. Jennings et al, Apple Health Location Tracking In Micro and Macro Detail”, DFRWS-APAC, 28-30 September 2022, Adelaide.

Forensic handwriting examination is a complex field that requires a high degree of skill and expertise. While examiners strive for accuracy and objectivity, errors can occur, particularly in challenging cases, sometimes with serious consequences. In a non-punitive environment, error can be a powerful learning tool in recognizing and overcoming the inherent limitations of human judgment and decision-making. Error may be even seen as a science propeller if it helps uncover systematic issues and contributes to better risk management This workshop aims to promote a positive error culture by recognizing the value of learning from mistakes to support continuous improvement.

By acknowledging the potential for error and the learning process of the human mind, examiners can enhance their critical thinking skills, recognize potential error sources and adopt a more rigorous approach to casework. This workshop will explore various factors that can contribute to errors, such as methodological limitations, material limitations and case complexity. Participants will also be introduced to tools for identifying and mitigating these factors.

The workshop will include a practical component where participants will analyze challenging handwriting cases. Through group discussions and root cause analysis, we will identify potential pitfalls, and discuss alternative interpretations.

By embracing a culture of continuous improvement, examiners can enhance the quality of their work and contribute to the fair administration of justice. After all, it’s better to make mistakes in a test and learn from them, than have mistakes identified in the courtroom!

In this workshop, we will cover the interpretation of mobile network records in the modern era. The topics we will cover include:

• Mobile Phone Technology Generations and fundamentals of mobility and communications management;
• Interpreting and processing timestamps;
• Identity and attribution;
• Cell connections and location estimation;
• How LTE changes everything;
• Signalling and advanced technical logs;
• Accuracy, precision and limitations in court.

The workshop includes access to an online scaffolded training exercise based on “Operation Pumpkin Scone”.