±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 1 Overall: 35520
New Yesterday: 6 Visitors: 135

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Webinars

Search found 156 matches

Re: IOS Mobile Forensic with Axiom and Oxygen

Post Posted: Apr 12, 19 13:25

[quote="randomaccess"]
My issue is that some people call a "full file system" a "physical"
And others call a backup with some extra files a "file system"
and it confuses people
[/quote]
This x100 ...
mcman
Topic: IOS Mobile Forensic with Axiom and Oxygen
Replies: 12
Views: 4712
 

Re: RAID 5

Post Posted: Apr 11, 19 17:20

Personally, I hate rebuilding RAIDs so I always vote for logical acquisitions while it's mounted but that would depend on your case and the amount of data you need to grab.

Grabbing each drive and ...
mcman
Topic: RAID 5
Replies: 19
Views: 2406
 

Re: IOS Mobile Forensic with Axiom and Oxygen

Post Posted: Apr 11, 19 17:18

[quote="Thomass30"][quote="mcman"] No physical acquisitions after iPhone 4. [/quote]

Correct me if I'm wrong but I think that full physical acquisition could be done for iPhone 4s, 5 and 5c
There ...
mcman
Topic: IOS Mobile Forensic with Axiom and Oxygen
Replies: 12
Views: 4712
 

Re: VMDK File Listing

Post Posted: Mar 25, 19 15:39

Strange, while we support both L01s and VMDKs, maybe AXIOM isn't liking the fact that it's kind of a container within a container and not treating the VMDK as an image only as a single file. I would t ...
mcman
Topic: VMDK File Listing
Replies: 9
Views: 1294
 

Re: VMDK File Listing

Post Posted: Mar 25, 19 15:24

If you have AXIOM, it will do it for you.

Parses out the file system (and artifacts too) from a VMDK and then you can export a file listing from the file system view in CSV. If you just want the fi ...
mcman
Topic: VMDK File Listing
Replies: 9
Views: 1294
 

Re: VID PID Index? Also Windows Event Log Index?

Post Posted: Mar 20, 19 14:56

Depending on your investigation, you probably don't need to worry about every VID/PID that gets listed under USB connections. Most investigations center around USB mass storage devices so I would star ...
mcman
Topic: VID PID Index? Also Windows Event Log Index?
Replies: 4
Views: 605
 

Re: IOS Mobile Forensic with Axiom and Oxygen

Post Posted: Mar 18, 19 18:41

[quote="asriel"]
Is there other way than Graykey (we don't have it) to get a physical image ? [/quote]

Even with a GrayKey, it's still a file system dump. It has to do with the data being encrypte ...
mcman
Topic: IOS Mobile Forensic with Axiom and Oxygen
Replies: 12
Views: 4712
 
Page 1 of 23
Page 1, 2, 3 ... 21, 22, 23  Next