You can run but you cannot hide from memory: Extracting IM evidence of Android apps

Smartphones have become a vital part of our business and everyday life, as they constitute the primary communication vector. Android dominates the smartphone market (86.2%) and has become pervasive, running in `smart' devices such as tablets, TV, watches, etc. Nowadays, instant messaging applications have become popular amongst smartphone users and since 2016 are the main way of messaging communication. Consequently, their inclusion in any forensics analysis is necessary as they constitute a source of valuable data, which might be used as (admissible) evidence. Often, their examination involves the extraction and analysis of the applications' databases that reside in the device's internal or external memory. The downfall of this method is the fact that databases can be tampered or erased, therefore the evidence might be accidentally or maliciously modified. In this paper, a methodology for retrieving instant messaging data from the volatile memory of Android smartphones is proposed, instead of the traditional database retrieval. The methodology is demonstrated with the use of a case study of four experiments, which provide insights regarding the behavior of such data in memory. Our experimental results show that a large amount of data can be retrieved from the memory, even if the device's battery is removed for a short time. In addition, the retrieved data are not only recent messages, but also messages sent a few months before data acquisition

Posaconazole MIC Distributions for Aspergillus fumigatus Species Complex by Four Methods: Impact of cyp51A Mutations on Estimation of Epidemiological Cutoff Values

ABSTRACT Estimating epidemiological cutoff endpoints (ECVs/ECOFFS) may be hindered by the overlap of MICs for mutant and nonmutant strains (strains harboring or not harboring mutations, respectively). Posaconazole MIC distributions for the Aspergillus fumigatus species complex were collected from 26 laboratories (in Australia, Canada, Europe, India, South and North America, and Taiwan) and published studies. Distributions that fulfilled CLSI criteria were pooled and ECVs were estimated. The sensitivity of three ECV analytical techniques (the ECOFFinder, normalized resistance interpretation [NRI], derivatization methods) to the inclusion of MICs for mutants was examined for three susceptibility testing methods (the CLSI, EUCAST, and Etest methods). The totals of posaconazole MICs for nonmutant isolates (isolates with no known cyp51A mutations) and mutant A. fumigatus isolates were as follows: by the CLSI method, 2,223 and 274, respectively; by the EUCAST method, 556 and 52, respectively; and by Etest, 1,365 and 29, respectively. MICs for 381 isolates with unknown mutational status were also evaluated with the Sensititre YeastOne system (SYO). We observed an overlap in posaconazole MICs among nonmutants and cyp51A mutants. At the commonly chosen percentage of the modeled wild-type population (97.5%), almost all ECVs remained the same when the MICs for nonmutant and mutant distributions were merged: ECOFFinder ECVs, 0.5 μg/ml for the CLSI method and 0.25 μg/ml for the EUCAST method and Etest; NRI ECVs, 0.5 μg/ml for all three methods. However, the ECOFFinder ECV for 95% of the nonmutant population by the CLSI method was 0.25 μg/ml. The tentative ECOFFinder ECV with SYO was 0.06 μg/ml (data from 3/8 laboratories). Derivatization ECVs with or without mutant inclusion were either 0.25 μg/ml (CLSI, EUCAST, Etest) or 0.06 μg/ml (SYO). It appears that ECV analytical techniques may not be vulnerable to overlap between presumptive wild-type isolates and cyp51A mutants when up to 11.6% of the estimated wild-type population includes mutants. KEYWORDS Aspergillus fumigatus, CLSI ECVs, ECVs, EUCAST ECVs, Etest, SYO, cyp51A mutants, posaconazole, triazole resistance, wild typ

Comment on: Multicentre validation of a EUCAST method for the antifungal susceptibility testing of microconidia-forming dermatophytes

peer reviewe

Emergence of Azole Resistance in Aspergillus fumigatus and Spread of a Single Resistance Mechanism

Paul Verweij and colleagues show that azole resistance has emerged inAspergillus fumigatus in The Netherlands and that a dominant resistance mechanism is present in clinical isolates

Method-dependent epidemiological cutoff values (ECVs) for detection of triazole resistance in Candida and Aspergillus species for the SYO colorimetric broth and Etest agar diffusion methods

Although the Sensitrite Yeast-One (SYO) and Etest methods are widely utilized, interpretive criteria are not available for triazole susceptibility testing of Candida or Aspergillus species. We collected fluconazole, itraconazole, posaconazole and voriconazole SYO and Etest MICs from 39 laboratories representing all continents for (method-agent-dependent): 11,171 Candida albicans, 215 C. dubliniensis, 4,418 C. glabrata species complex (SC), 157 C. (Meyerozyma) guilliermondii, 676 C. krusei (Pichia kudriavzevii), 298 C (Clavispora) lusitaniae, 911 and 3,691 C. parapsilosissensu stricto (SS) and C. parapsilosisSC, respectively, 36 C. metapsilosis, 110 C. orthopsilosis, 1,854 C. tropicalis, 244 Saccharomyces cerevisiae, 1,409 Aspergillus fumigatus, 389 A. flavus, 130 A. nidulans, 233 A. niger, and 302 A. terreus complexes. SYO/Etest MICs for 282 confirmed non-WT isolates were included: ERG11 (C. albicans), ERG11 and MRR1 (C. parapsilosis), cyp51A (A. fumigatus), and CDR2, CDR1 overexpression (C. albicans and C. glabrata, respectively). Interlaboratory modal agreement was superior by SYO for yeast spp., and by the Etest for Aspergillus spp. Distributions fulfilling CLSI criteria for ECV definition were pooled and we proposed SYO ECVs for S. cerevisiae, 9 yeast and 3 Aspergillus species, and Etest ECVs for 5 yeast and 4 Aspergillus species. The posaconazole SYO ECV of 0.06 \ub5g/ml for C. albicans and the Etest itraconazole ECV of 2 \ub5g/ml for A. fumigatus were the best predictors of non-WT isolates. These findings support the need for method-dependent ECVs, as overall, the SYO appears to perform better for susceptibility testing of yeast spp. and the Etest for Aspergillus spp. Further evaluations should be conducted with more Candida mutants

How to: interpret MICs of antifungal compounds according to the revised clinical breakpoints v. 10.0 European committee on antimicrobial susceptibility testing (EUCAST)

BACKGROUND: EUCAST has revised the definition of the susceptibility category "I" from "Intermediate" to "Susceptible, Increased exposure". This implies that "I" can be used where the drug-concentration at the site of infection is high, either because of dose escalation or through other means to ensure efficacy. Consequently, "I" is no longer used as a buffer-zone to prevent technical fact

Phylogenetically informative mutations in genes implicated in antibiotic resistance in Mycobacterium tuberculosis complex

Funder: Joachim Herz Stiftung; doi: http://dx.doi.org/10.13039/100008662Abstract: Background: A comprehensive understanding of the pre-existing genetic variation in genes associated with antibiotic resistance in the Mycobacterium tuberculosis complex (MTBC) is needed to accurately interpret whole-genome sequencing data for genotypic drug susceptibility testing (DST). Methods: We investigated mutations in 92 genes implicated in resistance to 21 anti-tuberculosis drugs using the genomes of 405 phylogenetically diverse MTBC strains. The role of phylogenetically informative mutations was assessed by routine phenotypic DST data for the first-line drugs isoniazid, rifampicin, ethambutol, and pyrazinamide from a separate collection of over 7000 clinical strains. Selected mutations/strains were further investigated by minimum inhibitory concentration (MIC) testing. Results: Out of 547 phylogenetically informative mutations identified, 138 were classified as not correlating with resistance to first-line drugs. MIC testing did not reveal a discernible impact of a Rv1979c deletion shared by M. africanum lineage 5 strains on resistance to clofazimine. Finally, we found molecular evidence that some MTBC subgroups may be hyper-susceptible to bedaquiline and clofazimine by different loss-of-function mutations affecting a drug efflux pump subunit (MmpL5). Conclusions: Our findings underline that the genetic diversity in MTBC has to be studied more systematically to inform the design of clinical trials and to define sound epidemiologic cut-off values (ECOFFs) for new and repurposed anti-tuberculosis drugs. In that regard, our comprehensive variant catalogue provides a solid basis for the interpretation of mutations in genotypic as well as in phenotypic DST assays

Venous gas embolism as a predictive tool for improving CNS decompression safety

A key process in the pathophysiological steps leading to decompression sickness (DCS) is the formation of inert gas bubbles. The adverse effects of decompression are still not fully understood, but it seems reasonable to suggest that the formation of venous gas emboli (VGE) and their effects on the endothelium may be the central mechanism leading to central nervous system (CNS) damage. Hence, VGE might also have impact on the long-term health effects of diving. In the present review, we highlight the findings from our laboratory related to the hypothesis that VGE formation is the main mechanism behind serious decompression injuries. In recent studies, we have determined the impact of VGE on endothelial function in both laboratory animals and in humans. We observed that the damage to the endothelium due to VGE was dose dependent, and that the amount of VGE can be affected both by aerobic exercise and exogenous nitric oxide (NO) intervention prior to a dive. We observed that NO reduced VGE during decompression, and pharmacological blocking of NO production increased VGE formation following a dive. The importance of micro-nuclei for the formation of VGE and how it can be possible to manipulate the formation of VGE are discussed together with the effects of VGE on the organism. In the last part of the review we introduce our thoughts for the future, and how the enigma of DCS should be approached