Welcome to this month’s round-up of recent posts to the Forensic Focus forums.
Can you help with this iPhone extraction in which a deleted SMS has a future timestamp?
What happens to data on a backup tape when it is wiped? Add your answers on the forum.
Do you still record BIOS date / time? Add your vote to the poll.
Which details do you record about exhibits as part of the imaging process? Chime in on the forum.
What training would you recommend for a Special Agent who wants to move into computer forensics with no tech background?
What can be done when a cell provider’s records don’t match up with extracted data?
Do you have any recommendations for searching .mbox files? Add your thoughts on the forum.
Forum members discuss how to reconstruct a RAID 5.
