±Forensic Focus Partners

Become an advertising partner

±Your Account


Forgotten password/username?

Site Members:

New Today: 0 Overall: 36620
New Yesterday: 3 Visitors: 110

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

Detailed Case Study Involving Evidence Tampering

Computer forensics discussion. Please ensure that your post is not better suited to one of the forums below (if it is, please post it there instead!)
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
Page Previous  1, 2 


Re: Detailed Case Study Involving Evidence Tampering

Post Posted: Jan 11, 17 17:55

- thefuf
Well, the absence of NTFS object IDs is an artifact too: "Links to files on removable media are not maintained" (source).

Agreed, and you have just referred to one possibility for why that might be. The absence of ObjectIDs is also one data point amongst many that helps define the relationship a particular computer (or to be more specific maybe we should say "host OS") did or did not have with a particular file.


Senior Member

Re: Detailed Case Study Involving Evidence Tampering

Post Posted: Jan 11, 17 19:09

- ArsenalConsulting
I'm not much of a design guy... I push the content to our web guy and let him do his thing. If I or one of my other employees were responsible for designing the case study you would probably never use the web again.

I don't know, as always beauty is in the eye of the beholder, I may actually like it. Rolling Eyes

Anyway thanks for understanding and putting the request in the queue. Smile

When and if you have time, point your web guy to here Wink :
as an example of how all sites are nowadays, and an example of what they shouldn't look like (anymore).

- In theory there is no difference between theory and practice, but in practice there is. - 

Page 2 of 2
Page Previous  1, 2