Welcome to this month’s round-up of recent posts to the Forensic Focus forums.
Forum members advise on producing E01 images in reverse sector order.
How would you convert an AD1 image to a dd?
Can you help roncfluey to image a MacBook Pro with X-Ways?
Forum members recommend Sarah Edwards’ presentation on Mac logs.
How would you deal with this potential manipulation of email aliases?
Forum members discuss revising the ACPO principles.
How much will ISO 17020 affect on-scene investigations?
Jonathan shares a helpful list of free computer forensic software.