±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 3 Overall: 35980
New Yesterday: 5 Visitors: 389

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

Search found 36 matches

Re: The End of Digital Forensics?

Post Posted: Apr 05, 11 01:21

I agree, Patrick. If "our" technology, forensic standards, etc. can keep up with "them", we'll be okay. However, I think that this won't be a matter of low-level MIPS-type increase in "raw computing ...
BattleSpeed
Topic: The End of Digital Forensics?
Replies: 37
Views: 36433
 

Re: The End of Digital Forensics?

Post Posted: Apr 04, 11 19:19

It's 2012, and the suspect in question has a laptop, a 64-GB iPhone, and a desktop computer at work, as well as a game box. Then you find an external HD, and a collection of 2- to 32-GB USB sticks, a ...
BattleSpeed
Topic: The End of Digital Forensics?
Replies: 37
Views: 36433
 

Re: The End of Digital Forensics?

Post Posted: Mar 31, 11 13:10

Not sure how much comfort we can take in the increasing use of hand-held and other small form-factor devices (with the implication of storage limitations).

The 64-GB iPhone is already a reality, ...
BattleSpeed
Topic: The End of Digital Forensics?
Replies: 37
Views: 36433
 

Snagit Information

Post Posted: Mar 28, 11 21:59

If you're examining a system with Snagit (Tech Smith's popular capture software) installed, you might want to see if images, etc. you find have come from Snagit.

If so, Snagit automatically attac ...
BattleSpeed
Topic: Snagit Information
Replies: 0
Views: 2614
 

Re: F-Response Alternative?

Post Posted: Dec 17, 10 21:28

[quote="jelle"]You probably considered this - but just to be sure: isn't there any way to covertly image the machine in a 'traditional' way, for example by doing it overnight or by faking some mainten ...
BattleSpeed
Topic: F-Response Alternative?
Replies: 20
Views: 26605
 

Re: F-Response Alternative?

Post Posted: Dec 17, 10 21:25

[quote="DFICSI"]Best bet - psexec, netcat, and dd for windows.

I think there is a lesson to be learned in situations such as this, we as forensic examiners often take on jobs in areas where we lack ...
BattleSpeed
Topic: F-Response Alternative?
Replies: 20
Views: 26605
 

Re: F-Response Alternative?

Post Posted: Dec 17, 10 06:44

Thanks, Jonathan - no FTK, but I'd heard the same as Patrick reports anyway (i.e., not that stealthy). I am obliged to be *very* stealthy in this situation.

Patrick - I'd appreciate your suggestio ...
BattleSpeed
Topic: F-Response Alternative?
Replies: 20
Views: 26605
 
Page 1 of 6
Page 1, 2, 3, 4, 5, 6  Next