±Your Account
Membership:
New Today: 1
New Yesterday: 10
Overall: 24377
Visitors: 83
±Latest Articles
· Catching the ghost: how to discover ephemeral evidence with Live RAM analysis
· Geo-tagging & Photo Tracking On iOS
· KS – an open source bash script for indexing data
· Mobile Device Geotags & Armed Forces
· Categorization of embedded system forensic collection methodologies
· Interpretation of NTFS Timestamps
· What are ‘gdocs’? Google Drive Data – part 2
· What are ‘gdocs’? Google Drive Data
· Bad Sector Recovery
· Forensic Artifact: Malware Analysis in Windows 8
· Geo-tagging & Photo Tracking On iOS
· KS – an open source bash script for indexing data
· Mobile Device Geotags & Armed Forces
· Categorization of embedded system forensic collection methodologies
· Interpretation of NTFS Timestamps
· What are ‘gdocs’? Google Drive Data – part 2
· What are ‘gdocs’? Google Drive Data
· Bad Sector Recovery
· Forensic Artifact: Malware Analysis in Windows 8
±Follow Us
±Latest Jobs
Back to top
Skip to content
Skip to menu
Back to top
Back to main
Skip to menu
Search found 9 matches
Re: Adobe Camera Raw Cache files
Posted: Wed Jan 23, 2013 2:48 pm
[quote="minime2k9"]Thanks for the help so far.
I have tried using a carving tool that supports raw image format to see if I could get any results (Adroit Photo Forensics), no joy.
Fortunately (o ...
I have tried using a carving tool that supports raw image format to see if I could get any results (Adroit Photo Forensics), no joy.
Fortunately (o ...
- PashaPal
- Topic: Adobe Camera Raw Cache files
- Replies: 8
- Views: 1810
Re: Vista Thumbnail Cache
Posted: Thu Nov 03, 2011 12:29 pm
Windows XP supports 256x256 icons, but storing it uncompressed would occupy ~400kB on disk, while storing it as PNG lends itself to much smaller sizes. Vista continued with the PNG format especially f ...
- PashaPal
- Topic: Vista Thumbnail Cache
- Replies: 4
- Views: 1251
Re: IE6 Cached Images Missing
Posted: Fri Aug 12, 2011 2:29 pm
[quote="RCStrunk"]Hi All,
I'm running an Internet history on a user who had some porn on the PC. I found some inapproperate images but not as many as I would expect. Looking at the cached HTLM fi ...
I'm running an Internet history on a user who had some porn on the PC. I found some inapproperate images but not as many as I would expect. Looking at the cached HTLM fi ...
- PashaPal
- Topic: IE6 Cached Images Missing
- Replies: 8
- Views: 1473
Re: PII inside picture ?
Posted: Mon Aug 08, 2011 9:17 am
You can use Adroit Photo Forensics (full disclosure: I am part of the company) to verify if the files are structurally intact.
Pure header-footer carving is not guaranteed to return a complete fil ...
Pure header-footer carving is not guaranteed to return a complete fil ...
- PashaPal
- Topic: PII inside picture ?
- Replies: 9
- Views: 1402
Re: JPG metadata
Posted: Wed Jan 26, 2011 4:56 am
As some of the posters have already mentioned, there are a few tools out there that can extract meta data.
Camera EXIF/IPTC times are only useful if you can verify that the camera that took the pho ...
Camera EXIF/IPTC times are only useful if you can verify that the camera that took the pho ...
- PashaPal
- Topic: JPG metadata
- Replies: 7
- Views: 4092
Re: LE: C4P Enhancement Application
Posted: Thu Nov 18, 2010 5:08 pm
Do not mean to derail this thread, and apologies for the self-promotion, but we(Digital Assembly - Makers of Adroit Photo Forensics) have been working with some LE folks out in the U.K. to get categor ...
- PashaPal
- Topic: LE: C4P Enhancement Application
- Replies: 17
- Views: 5869
Re: Image forensics
Posted: Tue Aug 17, 2010 7:35 am
So what sort of tampering are you looking for, is it any tampering or one of the following?
1) EXIF tampering
2) Removal of watermarks?
3) Copy and pasting portions of another image or area.
4) ...
1) EXIF tampering
2) Removal of watermarks?
3) Copy and pasting portions of another image or area.
4) ...
- PashaPal
- Topic: Image forensics
- Replies: 12
- Views: 4016