Forensic Focus Forum Round-Up

Welcome to this month’s round-up of recent posts to the Forensic Focus forums.

Can you help to explain the time discrepancy here?

Is it possible to recover an unsaved Notepad process?

Forum members discuss how critical write-blocking is during on-site triage.

Can you recommend a mobile forensics worksheet template for new analysts?


Get The Latest DFIR News

Join the Forensic Focus newsletter for the best DFIR articles in your inbox every month.

Unsubscribe any time. We respect your privacy - read our privacy policy.


Forum members discuss how to find a password for a Windows 7 user profile.Can you help doublezero with a question about timestamps in Office Open XML files?

How would you recommend extracting data from the Verizon Messenger application on a Verizon tablet?

What free or low cost software would you recommend to conduct email analysis?

What is your preferred method of imaging a MacBook Air?

How are you sharing forensic images while working from home?

Leave a Comment