Arne VidstrÃ¶m has reported a weakness in EnCase, which can be exploited to hide information on a disk. The weakness is caused due to missing support of Device Configuration Overlays (DCO) and therefore causes the program to not acquire parts of a disk using this feature. The weakness has been reported in EnCase Forensic Edition 4.18a. Other versions may also be affected…
Quantifying Data Volatility for IoT Forensics With Examples From Contiki OS
A Systematic Approach to Understanding MACB Timestamps on Unixlike Systems
Enterprise Forensics: Traditions vs Reality in Modern DFIR
Important: No API Key Entered.
Many features are not available without adding an API Key. Please go to the YouTube Feed settings page to add an API key after following these instructions.