Welcome to this month’s round-up of recent posts to the Forensic Focus forums.
Can you help to explain the time discrepancy here?
Is it possible to recover an unsaved Notepad process?
Forum members discuss how critical write-blocking is during on-site triage.
Can you recommend a mobile forensics worksheet template for new analysts?
Forum members discuss how to find a password for a Windows 7 user profile.Can you help doublezero with a question about timestamps in Office Open XML files?
How would you recommend extracting data from the Verizon Messenger application on a Verizon tablet?
What free or low cost software would you recommend to conduct email analysis?
What is your preferred method of imaging a MacBook Air?
How are you sharing forensic images while working from home?
