Forensic Focus Forum Round-Up

Welcome to this round-up of recent posts to the Forensic Focus forums.

Forum members discuss the best way to retrieve Facebook profile data.

What does it mean when a mail header shows two X-Originating IP addresses?

Forensic imaging of a USB with a corrupt file system.

Forum members discuss how to find an XLS file on a computer that has been reformatted.


Get The Latest DFIR News

Join the Forensic Focus newsletter for the best DFIR articles in your inbox every month.

Unsubscribe any time. We respect your privacy - read our privacy policy.


Unexpected SQLite field data in WhatsApp databases provokes discussion on the forum.

Forum members discuss how to process several thousand images on a hard drive.

Do you have any recommendations for mobile forensic tools? Add yours in the forum.

What is the most effective way to extract data from a Nokia Lumia 520?

Leave a Comment