±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 35868
New Yesterday: 0 Visitors: 169

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

Search found 48 matches

Re: How to obtain Offline MS Exchange EDB mailbox listing

Post Posted: Jul 25, 19 08:36

Can you explore the tables directly with NirSoft ESEDatabaseView?
JerryW
Topic: How to obtain Offline MS Exchange EDB mailbox listing
Replies: 6
Views: 1562
 

Re: Spyder Forensics

Post Posted: Jul 04, 19 15:35

I can't say about that particular course, but I think the CEO of Spyder Forensics is Rob Attoe. Rob is well known in the industry and I can say from personal experience is a very good instructor.
JerryW
Topic: Spyder Forensics
Replies: 1
Views: 1008
 

Re: UK residency requirement for computer forensic jobs

Post Posted: Mar 19, 19 12:11

It's not so much the employer that is worried about the level of security. Being mostly a service industry, it will be the level of clearance that the customer requires, as it is their data that is be ...
JerryW
Topic: UK residency requirement for computer forensic jobs
Replies: 1
Views: 2701
 

Re: ubuntu lnk files for usb access

Post Posted: Mar 01, 19 08:52

I did have some luck with the file '.recently-used.xbel'. To be able to view in a Windows environment meant copying out text and saving as xml. The file contained the path and added/modified/visited t ...
JerryW
Topic: ubuntu lnk files for usb access
Replies: 2
Views: 538
 

Re: Quick Encase Question regarding Search option

Post Posted: Dec 12, 18 14:11

In version 6 there are two levels of keywords one is at the 'global' level, transferable between cases and the other case-specific.

If you haven't got two 'keywords' tabs visible in the top toolbar ...
JerryW
Topic: Quick Encase Question regarding Search option
Replies: 2
Views: 853
 

Re: Encase 7 Index Buffer Reader script **RECOVERED ENTRY***

Post Posted: Dec 03, 18 22:29

I don't know if this will help your understanding, but may be a good starting point.:

https://digital-forensics.sans.org/blog/2011/09/20/ntfs-i30-index-attributes-evidence-of-deleted-and-overwritte ...
JerryW
Topic: Encase 7 Index Buffer Reader script **RECOVERED ENTRY***
Replies: 17
Views: 4123
 

Re: Recycle.Bin Timestamp

Post Posted: Oct 26, 18 15:32

I have always found Encase a bit over helpful for this task. If you weren't already aware there are actually two files involved with each file in the Recycle Bin, one with the file name and metadata a ...
JerryW
Topic: Recycle.Bin Timestamp
Replies: 2
Views: 1722
 
Page 1 of 7
Page 1, 2, 3, 4, 5, 6, 7  Next