Forensic Focus Forum Round-Up

Welcome to this month’s round-up of recent posts to the Forensic Focus forums.

Can you help with this iPhone extraction in which a deleted SMS has a future timestamp?

What happens to data on a backup tape when it is wiped? Add your answers on the forum.

Do you still record BIOS date / time? Add your vote to the poll.

Which details do you record about exhibits as part of the imaging process? Chime in on the forum.

What training would you recommend for a Special Agent who wants to move into computer forensics with no tech background?

What can be done when a cell provider’s records don’t match up with extracted data?

Do you have any recommendations for searching .mbox files? Add your thoughts on the forum.

Forum members discuss how to reconstruct a RAID 5.

Leave a Comment