Welcome to this month’s round-up of recent posts to the Forensic Focus forums.
How would you recover a $J file from a UsnJrnl file in a shadow copy?
Forum members discuss containing and recovering a malware infected server.
Share your tips for carving an .H264 video format on the forum.
Can you help Pachuco to find a blank PDF file?
How would you find out whether the ‘reset this PC‘ option has been used on a Windows machine?Forum members discuss how to decrypt Android dumps with Oxygen Forensic Detective.
What tools would you recommend for browser forensics?
Forum members discuss ACPO / NPCC guidelines.
How would you work out when a system last hibernated?
Forum members suggest free video enhancement software.
