±Forensic Focus Partners

Become an advertising partner

±Your Account


Forgotten password/username?

Site Members:

New Today: 0 Overall: 35742
New Yesterday: 3 Visitors: 135

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

Search found 161 matches

Re: FTK Image Properties

Post Posted: Jun 26, 19 19:22

Reacquire the image uncompressed? Open the compressed AD1, reacquire all the files within (metadata and all should be maintained), then either provide the size or the actual uncompressed container. I ...
Topic: FTK Image Properties
Replies: 4
Views: 1206

Re: Pulling Android RAM

Post Posted: Jun 17, 19 12:51

What are you looking to get from the Android memory?

Volatility supports it: https://github.com/volatilityfoundation/volatility/wiki/Android
AXIOM will carve it, we don't have specific artifacts f ...
Topic: Pulling Android RAM
Replies: 5
Views: 3008

Re: Iphone backup

Post Posted: Jun 03, 19 17:09

iCloud backups are still limited to app data that the specified app chooses to backup so it's not much better than an iTunes backup. You may also get additional data from iCloud that's stored in the c ...
Topic: Iphone backup
Replies: 3
Views: 670

Re: Iphone backup

Post Posted: Jun 03, 19 15:27

A backup is just that, a backup. Not ideal but might be the only thing available to you in some situations. With iOS most people are limited to an iTunes backup unless the phone is jailbroken or you h ...
Topic: Iphone backup
Replies: 3
Views: 670

Re: Using Regex/GREP in Axiom

Post Posted: May 22, 19 15:18

Hey James,

AXIOM uses .NET regex which is a little different than a Unix GREP.

Here's some common regexes I use that should work for your scenario (hopefully the formatting carries over to FF):
Topic: Using Regex/GREP in Axiom
Replies: 3
Views: 849

Re: IOS Mobile Forensic with Axiom and Oxygen

Post Posted: Apr 12, 19 13:25

My issue is that some people call a "full file system" a "physical"
And others call a backup with some extra files a "file system"
and it confuses people
This x100 ...
Topic: IOS Mobile Forensic with Axiom and Oxygen
Replies: 12
Views: 5366

Re: RAID 5

Post Posted: Apr 11, 19 17:20

Personally, I hate rebuilding RAIDs so I always vote for logical acquisitions while it's mounted but that would depend on your case and the amount of data you need to grab.

Grabbing each drive and ...
Topic: RAID 5
Replies: 19
Views: 2967
Page 1 of 23
Page 1, 2, 3 ... 21, 22, 23  Next