Forensic Focus Forum Round-Up

Welcome to this month’s round-up of recent posts to the Forensic Focus forums.

Is there a generic reader for smart card forensics?

Forum members discuss setupapi.offline.log.

What tools would you recommend for pulling data from iCloud?

Is there any way to recover a /var/log directory that has been removed deliberately?

Get The Latest DFIR News

Join the Forensic Focus newsletter for the best DFIR articles in your inbox every month.

Unsubscribe any time. We respect your privacy - read our privacy policy.

Would you capture a memory image for a machine that was turned off, shipped in and imaged a couple of days since last use?Forum members give advice on where to find deleted Facebook messages from the Messenger app.

Should you allow a phone you’ve seized to update to the latest version of WhatsApp?

A forum member shares their research on WhatsApp artifacts in desktop clients.

What tools would you recommend to view raw Windows log files?

Can you recommend some remote forensic imaging tools for joey2011?

Leave a Comment

Latest Videos

This error message is only visible to WordPress admins

Important: No API Key Entered.

Many features are not available without adding an API Key. Please go to the YouTube Feeds settings page to add an API key after following these instructions.

Latest Articles