Welcome to this month’s round-up of recent posts to the Forensic Focus forums.
Do you have any recommendations for image enhancement? Add your suggestions on the forum.
Forum members discuss deleted files and allocated space in EnCase.
Which job category do you put down on your car insurance forms?
Forum members help a student with questions about recovering data from a virtual machine.
Can you recommend a hex viewer that works on Mac?
Forum members discuss decompressing hyberfil.sys.
What might make the last printed date appear to be before the metadata creation date of a Word document? Chime in on the forum.
Forum members discuss how to work out which machines a specific USB device has been connected to.
Forum members give advice about how to see if an external drive with Bitlocker has been mounted on a machine.
Is it possible to truly delete a file, and if so, how? Add your thoughts on the forum.
