Welcome to this month’s round-up of recent posts to the Forensic Focus forums.
Tootypeg has created a flow chart for digital forensic investigators to use when making decisions about their cases – add your thoughts on the forum.
What are the appropriate terms to use when discussing child abuse material?
Can you help cs1337 to recover data from an OSX running High Sierra?
What tools would you recommend to extract data from an Amazon Fire Stick?
Forum members give their impressions of UK MPs’ discussion about disclosing digital evidence.
How do you register seized evidence? Share your thoughts on the forum.Is there any specific metadata present in RAID disks to signify that they are part of a RAID system?
How would you handle data in a case where legal privilege was raised after seizure of evidence?
Is it possible to find out how many times Windows has been reinstalled on a machine?
How would you explain these timestamp discrepancies in imsdal’s case?
Forum members discuss cases of digital forensic investigations failing.
What should you do if you come across IIOC in an unrelated investigation?
Is there an underlying problem with misinterpretation of evidence within the digital forensics community?
