±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 2 Overall: 36290
New Yesterday: 4 Visitors: 164

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

Search found 49 matches

Re: Convert .AD1 image to DD raw image

Post Posted: Nov 15, 19 09:35

Does it work in FTK Imager if you 'Create Disk Image' and direct it to the AD1 file as the source; rather than 'Add Evidence Item'?
JerryW
Topic: Convert .AD1 image to DD raw image
Replies: 16
Views: 3666
 

Re: How to obtain Offline MS Exchange EDB mailbox listing

Post Posted: Jul 25, 19 08:36

Can you explore the tables directly with NirSoft ESEDatabaseView?
JerryW
Topic: How to obtain Offline MS Exchange EDB mailbox listing
Replies: 6
Views: 2074
 

Re: Spyder Forensics

Post Posted: Jul 04, 19 15:35

I can't say about that particular course, but I think the CEO of Spyder Forensics is Rob Attoe. Rob is well known in the industry and I can say from personal experience is a very good instructor.
JerryW
Topic: Spyder Forensics
Replies: 1
Views: 2952
 

Re: UK residency requirement for computer forensic jobs

Post Posted: Mar 19, 19 11:11

It's not so much the employer that is worried about the level of security. Being mostly a service industry, it will be the level of clearance that the customer requires, as it is their data that is be ...
JerryW
Topic: UK residency requirement for computer forensic jobs
Replies: 1
Views: 5190
 

Re: ubuntu lnk files for usb access

Post Posted: Mar 01, 19 07:52

I did have some luck with the file '.recently-used.xbel'. To be able to view in a Windows environment meant copying out text and saving as xml. The file contained the path and added/modified/visited t ...
JerryW
Topic: ubuntu lnk files for usb access
Replies: 2
Views: 658
 

Re: Quick Encase Question regarding Search option

Post Posted: Dec 12, 18 13:11

In version 6 there are two levels of keywords one is at the 'global' level, transferable between cases and the other case-specific.

If you haven't got two 'keywords' tabs visible in the top toolbar ...
JerryW
Topic: Quick Encase Question regarding Search option
Replies: 2
Views: 1028
 

Re: Encase 7 Index Buffer Reader script **RECOVERED ENTRY***

Post Posted: Dec 03, 18 21:29

I don't know if this will help your understanding, but may be a good starting point.:

https://digital-forensics.sans.org/blog/2011/09/20/ntfs-i30-index-attributes-evidence-of-deleted-and-overwritte ...
JerryW
Topic: Encase 7 Index Buffer Reader script **RECOVERED ENTRY***
Replies: 17
Views: 4879
 
Page 1 of 7
Page 1, 2, 3, 4, 5, 6, 7  Next