±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 30569
New Yesterday: 5 Visitors: 30

±Latest Articles

RSS Feed Widget

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News   Forums   Articles

Search found 1245 matches

Re: Misleading terms FTK and Encase "carved" vs "deleted"

Post Posted: Wed Jun 15, 2016 7:46 pm

There are many issues with both of the big forensic suites that have been documented on this and other sites.
BitHead
Topic: Misleading terms FTK and Encase "carved" vs "deleted"
Replies: 2
Views: 519
 

Re: Beginner Questions - which software and test cases?

Post Posted: Wed Jun 15, 2016 7:41 pm

http://www.linuxleo.com/calug/forensicresource.pdf
BitHead
Topic: Beginner Questions - which software and test cases?
Replies: 5
Views: 617
 

Re: Added Accreditation for US Forensic Digital Examiners

Post Posted: Sat Mar 26, 2016 2:16 pm

It is a lot of signatures away from reality.
BitHead
Topic: Added Accreditation for US Forensic Digital Examiners
Replies: 1
Views: 535
 

Re: Application and Server Logs Investigation

Post Posted: Thu Mar 10, 2016 8:03 pm

[quote="harshbehl"]Hi
What are the best procedures to investigate the application and server logs ?[/quote]Know what you are looking for. Searching with no predefined goal is a fools errand, much li ...
BitHead
Topic: Application and Server Logs Investigation
Replies: 3
Views: 860
 

Re: Is it possible to recover a deleted virtual machine?

Post Posted: Wed Mar 02, 2016 8:24 pm

If you knew information about the header and footer, say if it was published in a specification, you could potentially carve the file manually in a hex editor.

https://articles.forensicfocus.com/20 ...
BitHead
Topic: Is it possible to recover a deleted virtual machine?
Replies: 2
Views: 557
 

Re: Microsoft Exchange Question

Post Posted: Wed Mar 02, 2016 8:18 pm

a. http://exchangeserverpro.com/tracking-mailbox-owner-deletes-using-mailbox-audit-logging/

b. https://exchangeserverpro.com/powershell-script-report-mailbox-audit-log-entries/

Do those answer ...
BitHead
Topic: Microsoft Exchange Question
Replies: 1
Views: 332
 

Re: HFS+ mounting in Linux

Post Posted: Wed Feb 24, 2016 8:09 pm

From the Ubuntu documentation
https://help.ubuntu.com/community/hfsplus

and Tuxtrix
http://tuxtrix.com/2014/03/accessing-hfs-partition-from-linux-in.html
BitHead
Topic: HFS+ mounting in Linux
Replies: 3
Views: 764
 
Page 1 of 178
Go to page 1, 2, 3 ... 176, 177, 178  Next