±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 36317
New Yesterday: 0 Visitors: 128

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

Search found 898 matches

Re: E01 Image format / tools

Post Posted: Nov 28, 19 07:53

If you really want reverse sector order, why not just read the .E01 file in reverse. As with others who have replied, I do not understand the requirement
mscotgrove
Topic: E01 Image format / tools
Replies: 16
Views: 3034
 

Re: E01 Image format / tools

Post Posted: Nov 27, 19 21:05

If you really want reverse sector order, why not just read the .E01 file in reverse. As with others who have replied, I do not understand the requirement
mscotgrove
Topic: E01 Image format / tools
Replies: 16
Views: 3034
 

Re: Format of memory card inside camera, true format or no?

Post Posted: Nov 27, 19 20:59

Most cameras do a 'quick' format. Recovery form this is normally possible. If a full format is done - may take 30 mins - then recovery is not possible.
mscotgrove
Topic: Format of memory card inside camera, true format or no?
Replies: 1
Views: 413
 

Re: Extracted File Hash Different from Report Hash

Post Posted: Nov 27, 19 20:57

If you have both photos as separate files then you can check the file size. A single byte different in length will be a different hash value. Carving does not always get the correct file size. If t ...
mscotgrove
Topic: Extracted File Hash Different from Report Hash
Replies: 3
Views: 625
 

Re: Recover files from USB RAW partition

Post Posted: Aug 26, 19 07:13

Where did the SD card come from - was it a camera / video camera?
mscotgrove
Topic: Recover files from USB RAW partition
Replies: 17
Views: 3687
 

Re: Recover files from USB RAW partition

Post Posted: Aug 25, 19 11:54

Have you looked at the chip with a hex sector viewer. Do you see data, or is it all zeros?

If there are files, data carving tools should see something
mscotgrove
Topic: Recover files from USB RAW partition
Replies: 17
Views: 3687
 

Re: Recover files from USB RAW partition

Post Posted: Aug 24, 19 17:29

I would start with data carving.

If data carving finds file starts it gives hope there is something to be found and that the chip can still be read. If the chip has failed, or is encrypted, then c ...
mscotgrove
Topic: Recover files from USB RAW partition
Replies: 17
Views: 3687
 
Page 1 of 129
Page 1, 2, 3 ... 127, 128, 129  Next