Mobile Phone Forensics: Breaking iPhone 5 Passcode
The pairing keys were good for a time when Apple required authentication via a computer forcing the creation of pairing keys to initialise the Apple device. Unfortunately these days with the large...
View ArticleGeneral Discussion: 27TB of CP recovered - is this the largest amount ever?
It would be very interesting to know the actual facts. Is 27TB just the total capacity? Does it include the cloud storage which was examined? Apparently Watkins was "addicted" to filming himself having...
View ArticleForensic Software: A $LogFile parser utility for NTFS
A new very improved version of the parser is finished. Changes: -Added decode of operation code 1000, which is a clearing of an index. Specifically the redo operation is just a reset, while the undo...
View ArticleGeneral Discussion: Linux CCTV hard drive problem
Hi Michael, The sata detect light isn't coming on. Yes, spinning. I will power it up again tonight as out today and let you know about the heads. Cheers, David
View ArticleMobile Phone Forensics: Best Practice to bypass Android lock
I strongly suggest to test it on a "safe" device if its a sensitive case. There are numerous of devices that store encrypted backups of .key files and the settings.db in other partitions. After reboot...
View ArticleClassifieds: Lot Forensic Equipment Talon Dossier Cellebrite FTK Encase
Ehdevlin wrote: I just wanted to drop a note. We bought one of the encase dongles. It arrived very quickly and was exactly what was promised. It was an excellent buy. Thank you EhDevlin. It was a...
View ArticleGeneral Discussion: OST to PST converter
NehwalSaina wrote: Visit http://www.osttopstconverter.recoveryfiles.org to download Kernel for OST to PST Conversion Tool, an effective and smartly programmed application for the recovery and...
View ArticleGeneral Discussion: question in $logfile
That's not easy to answer at all. You can try this one and see what you get; http://mft2csv.googlecode.com/files/LogFile_Parser_v1.0.0.13.zip Quick answer is that not all transactions have timestamps...
View ArticleGeneral Discussion: 27TB of CP recovered - is this the largest amount ever?
Chris_Ed wrote: It would be very interesting to know the actual facts. Is 27TB just the total capacity? My reading of the article (which does seem to contradict itself) was that it was 27TB of total...
View ArticleMobile Phone Forensics: iPhone 4S Boot Loop Data Extraction
Sorry, I should also note that I don't have access to an iTunes back up for the phone. Otherwise I suspect this process would have been a whole lot easier.
View ArticleGeneral Discussion: ISO 17025
Its pretty clear to me that ISO 17025 is not a good fit with computer forensics. The idea of a traditional lab with all the requirements for a clean environment and the risk of cross contamination etc...
View ArticleDigital Forensics Job Vacancies: eDiscovery Legal Consultant - London - £50k
In this high profile role you will initiate and manage direct sales/marketing efforts with targeted large law firms and corporations to increase revenue and build brand loyalty around eDiscovery...
View ArticleGeneral Discussion: 27TB of CP recovered - is this the largest amount ever?
rarosalion wrote: Still, to analyse 27TB of data would take enormous effort for any police force - and in a case like this (with identifiable victims potentially still in real danger), you wouldn't...
View ArticleGeneral Discussion: how to check if a video was modified
I do not know much about CCTV video formats. However, I would expect it is a format such as MPEG, AVCHD (and many others) that does not need finalising. This would mean it might be possible to cut a...
View ArticleForensic Software: FTK help.
I have successfully processed an incomplete image into FTK 4.2, so....my guess would be that, that image is corrupted..
View ArticleGeneral Discussion: how to check if a video was modified
At the current stage there's no software on the market (as far as I know) that will allow you to analyze a video to tell if it has been tampered or not. My company develops a software for doing the...
View ArticleClassifieds: SalvationData Flash Doctor + BGA Adapter kit
Hello everyone, I purchased a SalvationData Flash Doctor kit (Flash Doctor device, BGA adapter, and case) when I began studying for my Master's, with the intent of studying flash memory internals and...
View ArticleMobile Phone Forensics: Best Practice to bypass Android lock
A couple of weeks ago, the iPhone world discovered an exploit (not fixed) that allowed anyone to bypass the lockscreen and access the phone, messages, and even pictures. Well, the bug has been caught...
View ArticleGeneral Discussion: Reduce PST size !!
I am using ANSI version of Outlook in which I have around 1.5 GB of data with attachments. I thought some files gets corrupted can I see them? Right now I don’t want to upgrade my Outlook to Unicode....
View ArticleMobile Phone Forensics: Black iPhone Screen
Yes. a huge number of iPhone users freak out at their first encounter with the iPhone black screen, and most a black screen is not exactly an experience most users want to see on their phone display....
View Article
