Take the State of DFIR Survey

Caseloads, AI, tools and careers. 8 minutes, anonymous, early access to the report.

Take the survey →
Forums
Main Category
General (Technical,...
Microsoft access fo...
 
Notifications
Clear all

Microsoft access forensic

 
General (Technical, Procedural, Software, Hardware etc.)
Last Post by dega 10 years ago
3 Posts
2 Users
0 Reactions
1,036 Views
RSS
 dega
(@dega)
Reputable Member
Joined: 12 years ago
Posts: 267
Topic starter 10/01/2017 9:58 pm   [#15030]

we have got a few of MDB files. Whe would like to know when some records have been deleted. Is it possibile? Unluckly the file have been recovered by a no forensic guy!
Thanks



   
Quote
jaclaz
 jaclaz
(@jaclaz)
Illustrious Member
Joined: 19 years ago
Posts: 5133
11/01/2017 12:22 am  

we have got a few of MDB files. Whe would like to know when some records have been deleted. Is it possibile? Unluckly the file have been recovered by a no forensic guy!
Thanks

You can use the trial here to have a look
https://www.thegrideon.com/access-forensics.html

But whether that piece of info is available may depend from the way the whole database app was implemented, I seem to remember there is not by default such data in a "normal" table.

jaclaz



   
ReplyQuote
 dega
(@dega)
Reputable Member
Joined: 12 years ago
Posts: 267
Topic starter 18/01/2017 8:00 pm  

many thanks Jacklaz



   
ReplyQuote
Forum Jump:
  Previous Topic
Next Topic  
Share: