±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 30424
New Yesterday: 0 Visitors: 123

±Latest Articles

RSS Feed Widget

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News   Forums   Articles

Search found 145 matches

Re: SSD's acquisition

Post Posted: Thu Nov 26, 2015 3:14 pm

[quote="SilesianMan"]Hi everyone,

I would like to ask you, how do you deal with SSD acquisition?

We all know the issue with TRIM and garbage collection (Hash verification).

Is there any magic ...
Belkasoft
Topic: SSD's acquisition
Replies: 10
Views: 4201
 

Re: analyze mac data on windows

Post Posted: Fri Oct 23, 2015 9:33 am

[quote="pinin113"]never did it.but in this particular case i don't have the machine anymore.i just have the image obtained with ftk in e01[/quote]
You can perfectly analyze e01 in many tools includin ...
Belkasoft
Topic: analyze mac data on windows
Replies: 8
Views: 1952
 

Re: analyze mac data on windows

Post Posted: Fri Oct 23, 2015 2:23 am

[quote="pinin113"]thank you, what do you mean with 'dead box'?[/quote]

I mean investigation of a machine without switching it on.
Belkasoft
Topic: analyze mac data on windows
Replies: 8
Views: 1952
 

Re: analyze mac data on windows

Post Posted: Thu Oct 22, 2015 3:19 pm

[quote="pinin113"]hello, i have acquired an image of a mac using guymager live.now i have to see the files but i have a windows machine with ftk,i tried to use virtualbox to start a yosemite machine,b ...
Belkasoft
Topic: analyze mac data on windows
Replies: 8
Views: 1952
 

Re: iOS Forensics: Deleted 'messages'.

Post Posted: Thu Oct 22, 2015 2:14 pm

Belkasoft offers a tool which, among other functions, can recover deleted messages from freelists and SQLite unallocated space. You can try it free at [url=http://belkasoft.com/trial]http://belkasoft. ...
Belkasoft
Topic: iOS Forensics: Deleted 'messages'.
Replies: 2
Views: 808
 

Re: I'm looking for file carving software list with techniqu

Post Posted: Wed Oct 07, 2015 2:56 am

[quote="fazeelkowt"][quote="Belkasoft"][quote="fazeelkowt"][quote="Igor_Michailov"]For example,

Foremost
http://foremost.sourceforge.net[/quote]

i'm searching for windows based software[/quote ...
Belkasoft
Topic: I'm looking for file carving software list with technique
Replies: 10
Views: 3427
 

Re: How to know if an Android has been used in a period of t

Post Posted: Tue Oct 06, 2015 5:57 pm

[quote="Skywalker"][quote="PaulSanderson"]I would be looking at SQLite databases :)[/quote]

Why? I think that information might be stored in logs, not in SQLite databases 8O[/quote]

"If the onl ...
Belkasoft
Topic: How to know if an Android has been used in a period of time?
Replies: 13
Views: 2333
 
Page 1 of 21
Go to page 1, 2, 3 ... 19, 20, 21  Next