±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 36317
New Yesterday: 0 Visitors: 184

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

Dealing with FDE in an investigation how to proceed..?

Forensic software discussion (commercial and open source/freeware). Strictly no advertising.
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
 
  

samsacksons
Newbie
 

Dealing with FDE in an investigation how to proceed..?

Post Posted: Nov 15, 19 00:01

We all know about brute-forcing, obtaining search warrant for iCloud, asking the user etc.

You have two devices (single user mode) each belonging to two different users. Let’s say one is encrypted with FV2. We are looking for contraband media files.

What do you do next? Where do you look? And, what if you can’t find it?

Please provide procedure on how to proceed as if it’s Law Enforcement noting issues of privacy and scope of warrant.

Please give details on your jurisdiction..country  
 
  

deeFIR
Member
 

Re: Dealing with FDE in an investigation how to proceed..?

Post Posted: Nov 15, 19 01:43

I don't think members here look kindly on those seeking others to do their research assignments for them.  
 
  

jaclaz
Senior Member
 

Re: Dealing with FDE in an investigation how to proceed..?

Post Posted: Nov 15, 19 10:57

- samsacksons

Where do you look?
And, what if you can’t find it?


You write in your notes:
[Date]/[Time] Looking everywhere for it.
[Date]/[Time] Searched everywhere for it, but couldn't find it.

jaclaz
_________________
- In theory there is no difference between theory and practice, but in practice there is. - 
 
  

samsacksons
Newbie
 

Re: Dealing with FDE in an investigation how to proceed..?

Post Posted: Nov 15, 19 11:19

- jaclaz


You write in your notes:
[Date]/[Time] Looking everywhere for it.
[Date]/[Time] Searched everywhere for it, but couldn't find it.

jaclaz


More specifically, can I just go and grab all of the browser saved web passwords. Or there any legal ramifications?  
 
  

jaclaz
Senior Member
 

Re: Dealing with FDE in an investigation how to proceed..?

Post Posted: Nov 15, 19 12:44

- samsacksons
- jaclaz


You write in your notes:
[Date]/[Time] Looking everywhere for it.
[Date]/[Time] Searched everywhere for it, but couldn't find it.

jaclaz


More specifically, can I just go and grab all of the browser saved web passwords. Or there any legal ramifications?


Good question, bad reference/quote, wrong thread.

The one you started about web password is this other one:
www.forensicfocus.com/...c/t=18174/

The present one is about FDE and looking for it (whatever it is).


jaclaz
_________________
- In theory there is no difference between theory and practice, but in practice there is. - 
 

Page 1 of 1