Forensic Focus Forum Round-Up

Welcome to this month’s round-up of recent posts to the Forensic Focus forums.

Do you have any recommendations for image enhancement? Add your suggestions on the forum.

Forum members discuss deleted files and allocated space in EnCase.

Which job category do you put down on your car insurance forms?

Forum members help a student with questions about recovering data from a virtual machine.


Get The Latest DFIR News!

Join the Forensic Focus newsletter for the best DFIR articles in your inbox every month.


Unsubscribe any time. We respect your privacy - read our privacy policy.

Can you recommend a hex viewer that works on Mac?

Forum members discuss decompressing hyberfil.sys.

What might make the last printed date appear to be before the metadata creation date of a Word document? Chime in on the forum.

Forum members discuss how to work out which machines a specific USB device has been connected to.

Forum members give advice about how to see if an external drive with Bitlocker has been mounted on a machine.

Is it possible to truly delete a file, and if so, how? Add your thoughts on the forum.

Leave a Comment

Latest Videos

This error message is only visible to WordPress admins

Important: No API Key Entered.

Many features are not available without adding an API Key. Please go to the YouTube Feed settings page to add an API key after following these instructions.

Latest Articles

Share to...