±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 35742
New Yesterday: 3 Visitors: 135

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

Search found 161 matches

Re: FTK Image Properties

Post Posted: Jun 26, 19 19:22

Reacquire the image uncompressed? Open the compressed AD1, reacquire all the files within (metadata and all should be maintained), then either provide the size or the actual uncompressed container. I ...
mcman
Topic: FTK Image Properties
Replies: 4
Views: 1206
 

Re: Pulling Android RAM

Post Posted: Jun 17, 19 12:51

What are you looking to get from the Android memory?

Volatility supports it: https://github.com/volatilityfoundation/volatility/wiki/Android
AXIOM will carve it, we don't have specific artifacts f ...
mcman
Topic: Pulling Android RAM
Replies: 5
Views: 3008
 

Re: Iphone backup

Post Posted: Jun 03, 19 17:09

iCloud backups are still limited to app data that the specified app chooses to backup so it's not much better than an iTunes backup. You may also get additional data from iCloud that's stored in the c ...
mcman
Topic: Iphone backup
Replies: 3
Views: 670
 

Re: Iphone backup

Post Posted: Jun 03, 19 15:27

A backup is just that, a backup. Not ideal but might be the only thing available to you in some situations. With iOS most people are limited to an iTunes backup unless the phone is jailbroken or you h ...
mcman
Topic: Iphone backup
Replies: 3
Views: 670
 

Re: Using Regex/GREP in Axiom

Post Posted: May 22, 19 15:18

Hey James,

AXIOM uses .NET regex which is a little different than a Unix GREP.

Here's some common regexes I use that should work for your scenario (hopefully the formatting carries over to FF):
...
mcman
Topic: Using Regex/GREP in Axiom
Replies: 3
Views: 849
 

Re: IOS Mobile Forensic with Axiom and Oxygen

Post Posted: Apr 12, 19 13:25

[quote="randomaccess"]
My issue is that some people call a "full file system" a "physical"
And others call a backup with some extra files a "file system"
and it confuses people
[/quote]
This x100 ...
mcman
Topic: IOS Mobile Forensic with Axiom and Oxygen
Replies: 12
Views: 5366
 

Re: RAID 5

Post Posted: Apr 11, 19 17:20

Personally, I hate rebuilding RAIDs so I always vote for logical acquisitions while it's mounted but that would depend on your case and the amount of data you need to grab.

Grabbing each drive and ...
mcman
Topic: RAID 5
Replies: 19
Views: 2967
 
Page 1 of 23
Page 1, 2, 3 ... 21, 22, 23  Next