±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 35984
New Yesterday: 0 Visitors: 126

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

Search found 29 matches

Re: Apple FileVault 2

Post Posted: Apr 14, 16 21:05

Is the device dated circa 2010 or the install dated circa 2010? FileVault2 was released with OSX Lion which wasn't officially released until July 2011.

If the equipment is circa 2010 and the insta ...
davepawlak
Topic: Apple FileVault 2
Replies: 3
Views: 5908
 

Re: Apple FileVault 2

Post Posted: Apr 09, 16 20:26

A little more about the Mac you are hoping to image would be helpful to be answer your question.

However, generally FV2 is FVE not FDE. So the data available are the EFI and Recovery Volumes. You ...
davepawlak
Topic: Apple FileVault 2
Replies: 3
Views: 5908
 

Re: special timeline needed

Post Posted: Dec 14, 15 11:45

Don't let the details cause you to over analyze the data at hand. There is going to be a degree of uncertainty because human nature and unpredictability is involved.

The "exact" moment a text mess ...
davepawlak
Topic: special timeline needed
Replies: 6
Views: 6084
 

Re: Mount Forensics Image on Macpro

Post Posted: Nov 29, 15 11:32

[quote="jaclaz"]
...IMDISK will do for dd images and through a proxy also for EWF and some other image formats (making use of libewf)

jaclaz[/quote]

IMDISK completely skipped my mind. IMDISK i ...
davepawlak
Topic: Mount Forensics Image on Macpro
Replies: 4
Views: 7492
 

Re: Mount Forensics Image on Macpro

Post Posted: Nov 28, 15 20:08

Which OS is the Mac Pro booted to?

What is the format of the image file you want to mount?

Too many variables to just "give" you an answer...but there are several ways to accomplish this task.
...
davepawlak
Topic: Mount Forensics Image on Macpro
Replies: 4
Views: 7492
 

Re: CDR Analysis software

Post Posted: May 15, 15 09:09

I have manually mapped records.... ugh

I used Google Earth for a bit and it's okay.

I used Microsoft Streets and Trips (I think that's what it was called?) and it was okay.

I began using Adva ...
davepawlak
Topic: CDR Analysis software
Replies: 19
Views: 25424
 

Re: Internet Examiner ToolKit.. IXTK - SiQuest users?

Post Posted: Nov 02, 14 08:15

IXTK is the evolution of their old flagship product, CacheBack. You can google some old press about CacheBack and NetAnalysis having been used in a murder trial and discrepancies between user results ...
davepawlak
Topic: Internet Examiner ToolKit.. IXTK - SiQuest users?
Replies: 15
Views: 17979
 
Page 1 of 5
Page 1, 2, 3, 4, 5  Next