±Forensic Focus Partners

Become an advertising partner

±Your Account


Forgotten password/username?

Site Members:

New Today: 2 Overall: 36324
New Yesterday: 2 Visitors: 166

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

Search found 403 matches

Re: Extract $J

Post Posted: Dec 13, 19 18:18

I did try getting my tool to re-create the file path. The issue is, that with the 2,000,000 records that were usually extracted, it took ages!

I may look at re-doing this in the future or a newer v ...
Topic: Extract $J
Replies: 17
Views: 1575

Re: Extract $J

Post Posted: Dec 12, 19 20:47

I do have a tool that will recover all records from a disk, deleted and live.
Its usually used internally here, but I'll make it available to those who want it.
As a general rule, I get at least x2- ...
Topic: Extract $J
Replies: 17
Views: 1575

Re: Extract $J

Post Posted: Dec 12, 19 16:38

I thought that the $usnjrnl (and by association $J ADS) were not included as part of the volume shadow copies.
If that is the case, then it should give you the same data as the one from the current s ...
Topic: Extract $J
Replies: 17
Views: 1575

Re: Snapchat data from Graykey extraction?

Post Posted: Nov 29, 19 11:52

See here:
Topic: Snapchat data from Graykey extraction?
Replies: 4
Views: 1304

Re: E01 Image format / tools

Post Posted: Nov 28, 19 07:24

My understanding of reverse disk imaging is to do with caching of sectors.

AFAIK, When a disk reads sequentially it caches the sectors after it in anticipation. Where a disk is damaged, this can ca ...
Topic: E01 Image format / tools
Replies: 16
Views: 3057

Re: Noob carving query

Post Posted: Nov 24, 19 13:35

No. Carving is a process for purely finding data based of attributes of data (header/footer) etc.

Deleted file recovery uses metadata to recover files and this may provide that information, even if ...
Topic: Noob carving query
Replies: 2
Views: 798

Re: ACPO Principles Revised

Post Posted: Nov 15, 19 07:10

The FSR Guidance does refer to analysis but nothing for digital forensics. Moreover, the Guidance refers to experience and expertise in the subject matter, not testing or calibratio ...
Topic: ACPO Principles Revised
Replies: 63
Views: 9690
Page 1 of 58
Page 1, 2, 3 ... 56, 57, 58  Next