Welcome to this month’s round-up of recent posts to the Forensic Focus forums.
Is there a generic reader for smart card forensics?
Forum members discuss setupapi.offline.log.
What tools would you recommend for pulling data from iCloud?
Is there any way to recover a /var/log directory that has been removed deliberately?
Would you capture a memory image for a machine that was turned off, shipped in and imaged a couple of days since last use?Forum members give advice on where to find deleted Facebook messages from the Messenger app.
Should you allow a phone you’ve seized to update to the latest version of WhatsApp?
A forum member shares their research on WhatsApp artifacts in desktop clients.
What tools would you recommend to view raw Windows log files?
Can you recommend some remote forensic imaging tools for joey2011?
