General (Technical, Procedural, Software, Hardware etc.)

When does Windows modify IndexerVolumeGuid file in a NTFS volume?

Last post by Skywalker, 5 years ago

Airplane Mode, Preserving evidence

Last post by Plan_B, 5 years ago

Google Takeout - parse Locations

Last post by Plan_B, 5 years ago

Manufacturing date of CD/DVD

Last post by roncufley, 5 years ago

CCleaner forensics without INI files

Last post by boydg1, 5 years ago

4TB Ntfs hdd, written (dd) 8GB iso image, possible recovery?

Last post by jaclaz, 5 years ago

JGENX files

Last post by CoolingCrumpets, 5 years ago

How to find every web-based email address that was used on an iPhone?

Last post by pippin, 5 years ago

Screen position

Last post by jaclaz, 5 years ago

Find out if SD card has ever been inserted into Mac

Last post by pippin, 5 years ago

iOS - Message Retention and Find my iPhone Artifact

Last post by Rosia, 5 years ago

X-Way Forensics practitioners needed

Last post by jaclaz, 5 years ago

iOS 14.4.2, Apple iPhone8, SBPowerDownViewController

Last post by Plan_B, 5 years ago

Does Windows 7 log hardware components?

Last post by ForensicChicken, 5 years ago

Forensic Fails

Last post by jaclaz, 5 years ago