±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 36317
New Yesterday: 0 Visitors: 179

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

Search found 394 matches

Re: exploit evidence from encase

Post Posted: Dec 12, 19 12:37

[quote="keydet89"][quote="afsfr"]we collect Linux image in encase, we suspect one of Linux application is exploited and attacker got root shell access through exploit, is there any way to find evidenc ...
Rich2005
Topic: exploit evidence from encase
Replies: 4
Views: 637
 

Re: Decrypting an APFS Image

Post Posted: Dec 11, 19 09:50

I believe the short answer is no.
(they seem weak on Apple stuff and not just APFS.....things like HFS+/file-vault volumes I've had to generate decrypted images manually using Linux or using Axiom - ...
Rich2005
Topic: Decrypting an APFS Image
Replies: 4
Views: 523
 

Re: USB Hash value keeps changing within writeblocker

Post Posted: Dec 02, 19 13:47

The drive is now failing in some way...
Rich2005
Topic: USB Hash value keeps changing within writeblocker
Replies: 4
Views: 840
 

Re: Cellebrite PA supports Remote Desktop Access

Post Posted: Nov 29, 19 08:49

I imagine the nub of it is why would Cellebrite allow multiple users free?
Essentially you're just enabling cloning/sharing of the dongle meaning you could have one user working on the dongle locall ...
Rich2005
Topic: Cellebrite PA supports Remote Desktop Access
Replies: 25
Views: 3924
 

Re: Cellebrite PA supports Remote Desktop Access

Post Posted: Nov 28, 19 17:45

[quote="sovietpecker"]I understand your pain. However, you should not be so hard on folks who really do not believe that remote is the way forward. I myself really believe that forensic work is best d ...
Rich2005
Topic: Cellebrite PA supports Remote Desktop Access
Replies: 25
Views: 3924
 

Re: E01 Image format / tools

Post Posted: Nov 28, 19 08:13

[quote="mscotgrove"]If you really want reverse sector order, why not just read the .E01 file in reverse. As with others who have replied, I do not understand the requirement[/quote]

As minime says ...
Rich2005
Topic: E01 Image format / tools
Replies: 16
Views: 3023
 

Re: Convert .AD1 image to DD raw image

Post Posted: Nov 22, 19 11:42

[quote="jaclaz"]@bitshavers

With all due respect, those are exceptionally good solutions Smile to [i]some[/i] cases [i]only[/i] (and in the hands of people that really know where their towel is).

...
Rich2005
Topic: Convert .AD1 image to DD raw image
Replies: 16
Views: 3961
 
Page 1 of 57
Page 1, 2, 3 ... 55, 56, 57  Next