±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 2 Overall: 36324
New Yesterday: 2 Visitors: 166

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

Search found 403 matches

Re: Extract $J

Post Posted: Dec 13, 19 18:18

I did try getting my tool to re-create the file path. The issue is, that with the 2,000,000 records that were usually extracted, it took ages!

I may look at re-doing this in the future or a newer v ...
minime2k9
Topic: Extract $J
Replies: 17
Views: 1575
 

Re: Extract $J

Post Posted: Dec 12, 19 20:47

I do have a tool that will recover all records from a disk, deleted and live.
Its usually used internally here, but I'll make it available to those who want it.
As a general rule, I get at least x2- ...
minime2k9
Topic: Extract $J
Replies: 17
Views: 1575
 

Re: Extract $J

Post Posted: Dec 12, 19 16:38

I thought that the $usnjrnl (and by association $J ADS) were not included as part of the volume shadow copies.
If that is the case, then it should give you the same data as the one from the current s ...
minime2k9
Topic: Extract $J
Replies: 17
Views: 1575
 

Re: Snapchat data from Graykey extraction?

Post Posted: Nov 29, 19 11:52

See here:
https://support.magnetforensics.com/s/article/New-in-Magnet-AXIOM-3-7-0-16279
minime2k9
Topic: Snapchat data from Graykey extraction?
Replies: 4
Views: 1304
 

Re: E01 Image format / tools

Post Posted: Nov 28, 19 07:24

My understanding of reverse disk imaging is to do with caching of sectors.

AFAIK, When a disk reads sequentially it caches the sectors after it in anticipation. Where a disk is damaged, this can ca ...
minime2k9
Topic: E01 Image format / tools
Replies: 16
Views: 3057
 

Re: Noob carving query

Post Posted: Nov 24, 19 13:35

No. Carving is a process for purely finding data based of attributes of data (header/footer) etc.

Deleted file recovery uses metadata to recover files and this may provide that information, even if ...
minime2k9
Topic: Noob carving query
Replies: 2
Views: 798
 

Re: ACPO Principles Revised

Post Posted: Nov 15, 19 07:10

[quote="trewmte"]
The FSR Guidance does refer to analysis but nothing for digital forensics. Moreover, the Guidance refers to experience and expertise in the subject matter, not testing or calibratio ...
minime2k9
Topic: ACPO Principles Revised
Replies: 63
Views: 9690
 
Page 1 of 58
Page 1, 2, 3 ... 56, 57, 58  Next