Forensic Focus Forum Round-Up

Welcome to this round-up of recent posts to the Forensic Focus forums.

How would you acquire data from a password protected MS Surface Pro?

Forum members discuss malware risk mitigation on forensic workstations.

How can a split E01 image of a Windows 7 Enterprise SP1 physical disk protected by BitLocker be mounted? Forum members come up with a solution.

Minime2k9 asks how to find evidence of remote desktop login outside of the Windows Security log.


Get The Latest DFIR News

Join the Forensic Focus newsletter for the best DFIR articles in your inbox every month.


Unsubscribe any time. We respect your privacy - read our privacy policy.

Should you keep a chain of custody for forensic investigations in corporate environments? Add your thoughts on the forum.

Forum members discuss a timestamp discrepancy on an acquired Linux machine.

How do you recover deleted Snapchat images on an iPhone 4S? Chime in on the forum.

Forum member liguoroa gives feedback on BlessHex editor.

Leave a Comment

Latest Videos

Digital Forensics News Round-Up, May 22 2024 #dfir #computerforensics

Forensic Focus 22nd May 2024 6:03 pm

Podcast Ep. 85 Recap: AI-Powered License Plate Reading With Amped DeepPlate #dfir #digitalforensics

Forensic Focus 21st May 2024 1:57 pm

This error message is only visible to WordPress admins

Important: No API Key Entered.

Many features are not available without adding an API Key. Please go to the YouTube Feeds settings page to add an API key after following these instructions.

Latest Articles