±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 36115
New Yesterday: 0 Visitors: 142

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

Search found 70 matches

Re: Wear Leveling - How many time can overwrite?

Post Posted: May 06, 16 19:59

Most of the time a USB flash drive will not have wear leveling. You will usually only see it on an SSD. I would suggest an encrypted USB hard drive or several write protected flash drives. Or get a ...
paul206
Topic: Wear Leveling - How many time can overwrite?
Replies: 8
Views: 8526
 

Re: BitLocker experience

Post Posted: Apr 21, 15 00:20

FTK 5.6 will decode bitlocker. Here is a quote from the current manual.

"[i]If you have the proper credentials, you can decrypt Bitlocker encrypted partitions. You can decrypt the Bitlocker partit ...
paul206
Topic: BitLocker experience
Replies: 22
Views: 23919
 

Re: Malware risk mittigation on forensic workstations?

Post Posted: Apr 15, 15 00:14

I'm with jaclaz on this one. Everything on your hard drive or image is static. You are not going to go around activating executables. Malware in a pdf is possible but less likely. It's like my ol ...
paul206
Topic: Malware risk mittigation on forensic workstations?
Replies: 8
Views: 8626
 

Re: Active file and deleted file with identical timestamps

Post Posted: Aug 28, 14 19:46

This is straight from the FTK 5.4 manual dated June 2, 2014 from the Evidence Processing Options section.

[i]Data Carve carves data immediately after pre-processing. Click Carving Options, then sel ...
paul206
Topic: Active file and deleted file with identical timestamps
Replies: 12
Views: 9823
 

Re: Hotmail Log Files

Post Posted: Aug 07, 14 20:02

I assume you are referring to Microsoft Outlook Webmail since Hotmail does not exist any more and all attempts to access it through the web result in being redirected to Outlook. I use Outlook for my ...
paul206
Topic: Hotmail Log Files
Replies: 8
Views: 6928
 

Re: Windows Updates on Forensic Machine

Post Posted: May 27, 14 19:45

Better late than never. I have an Ethernet A/B switch on my machine with the PC connected to A and nothing on B resulting in A being on and B is off. I leave it off and when I need to run Windows Up ...
paul206
Topic: Windows Updates on Forensic Machine
Replies: 15
Views: 13357
 

Re: Social networking solutions

Post Posted: May 17, 12 00:27

Thanks very much. I will talk to my boss about it. Only problem is that our routers and gateway don't belong to us. We have to request the logs when we want to see them from the state agency that s ...
paul206
Topic: Social networking solutions
Replies: 7
Views: 6574
 
Page 1 of 10
Page 1, 2, 3, 4, 5, 6, 7, 8, 9, 10  Next