What’s Happening In Forensics – Jan 27, 2020

Adam Harrison discusses evidence of program execution on different Windows OS versions.

Magnet release AXIOM Cyber for remote acquisitions.

Foxton Forensics discover some differences between Chromium and Edge Chromium artifacts.

Andrew Hoog unpicks NavdDoomConductor, which tracks precise geolocation and time on iOS.

Élsio Pinto shares some tips on becoming a DFIR practitioner.

MSAB release the Kiosk Mk III.

Leave a Comment