Forensic Focus Forum Round-Up

Welcome to this month’s round-up of recent posts to the Forensic Focus forums.

Can you help with this iPhone extraction in which a deleted SMS has a future timestamp?

What happens to data on a backup tape when it is wiped? Add your answers on the forum.

Do you still record BIOS date / time? Add your vote to the poll.

Which details do you record about exhibits as part of the imaging process? Chime in on the forum.


Get The Latest DFIR News

Join the Forensic Focus newsletter for the best DFIR articles in your inbox every month.

Unsubscribe any time. We respect your privacy - read our privacy policy.


What training would you recommend for a Special Agent who wants to move into computer forensics with no tech background?

What can be done when a cell provider’s records don’t match up with extracted data?

Do you have any recommendations for searching .mbox files? Add your thoughts on the forum.

Forum members discuss how to reconstruct a RAID 5.

Leave a Comment