Mobile Phone Forensics: Blackberry Q10
RonS wrote: Cellebrite UFED Touch and UFED 4PC will support logical extraction from BB 10 devices in its next release that will include SMS messages. Ron Perfect timing! Cellebrite saves the day.........
View ArticleGeneral Discussion: Certification/training
My goal is to become a great digital forensic examiner. My cases primarily consist of online child exploitation incidents and dead box examinations. I also investigate frauds and want to learn more...
View ArticleEmployment and Career Issues: IT and Mobile Apprenticeships
Perhaps not everyones choice but maybe someone here at FF or maybe even family members looking to start somewhere in the employed marketplace might have an interest in these current vacancies. Also...
View ArticleGeneral Discussion: how to check if a video was modified
This is done by analyzing single frames and time stamps.
View ArticleGeneral Discussion: A paper loosely related to online forensics
Igor_Michailov wrote: It's hard to find a black cat in a dark room, especially if the cat is not there..... and if it doesn't want to be found and it's good at covering its tracks... <img...
View ArticleGeneral Discussion: Digital forensic Investigation Models
It is an interesting topic, probably worth looking into EDRM and incident response lifecycles as other models "used" in industry (certainly mentioned a lot in job postings) All the models look very...
View ArticleMobile Phone Forensics: HTC HD7 JTagging
JTAGing will only get you to the NAND flash memory which will get you some of the user data but the bulk of it will be stored on an lock encrypted Micro SD card that the phone uses for secondary...
View ArticleMobile Phone Forensics: Chip Off - Ace Laboratory - Russia
As this post is in the Mobile Forensics Section, I am guessing you are trying to read chips from mobile devices? If that is the case, then why are you using the Deepspar for mobile phones? I believe...
View ArticleGeneral Discussion: Digital forensic Investigation Models
athulin wrote: Perhaps it would be a an idea to ask an archaeologist for a process how to do a dig, and compare.Possibly the base philosophy is different re: timeliness <img...
View ArticleGeneral Discussion: how to check if a video was modified
mcy111 wrote: then I do have a clock in the view of the camera and the video is timestamped, I see both time and date. How do I spot those scenes? Like check if the clock on the video is synchronized...
View ArticleMobile Phone Forensics: Chip off or JTAG
http://www.ibreakityoufixit.com/shop/wp-forensics-kit Kits can be bought through Teel Tech Canada or USA as well, make sure you specify your power specs, 110 or 220 before hand.
View ArticleGeneral Discussion: E-Discovery and SQL
Databases are used everywhere and SQL is the common form of database. They are used by browsers, for local storage, to store interesting data like URL histories (using SQLLite). They are used by...
View ArticleDigital Forensics Job Vacancies: Digital Forensic Technicians - Welwyn Garden...
Hertfordshire Constabulary HTCU have vacancies for two Technicians. Starting salary is £23,277. Role is supporting Digital Forensic Investigators by extracting data from devices, examining mobile...
View ArticleGeneral Discussion: E-Discovery and SQL
Sydney34, this makes a lot of sense - exactly what I needed. I have asked around other places and have discovered that the back end of the particular software used most is highly customisable using...
View ArticleGeneral Discussion: where does macintosh keep process records
In a Mac exam look for a plist. For example: launchd.plist -- System wide and per-user daemon/agent configuration files...
View ArticleDigital Forensics Job Vacancies: Digital Forensic Investigator - FCA, London
Apologies, I think I put the internal link up initially - should be working now. Thanks for pointing it out!
View ArticleMobile Phone Forensics: Chip off or JTAG
Hmmm, keep in mind, we do get broken phones from bad guys, they break them just before arrest, they throw them in water just before arrest, phone are subject to other cases like arsons where they are...
View ArticleForensic Hardware: Large Archive Solution for Encrypted images.
Thank you guys for all the great answers. I have been told that "You can't compress a encrypted image using FTK" is this true? No, I can't get a decrypted image, each computer requires us to request a...
View ArticleGeneral Discussion: how to check if a video was modified
Everything seems to be syncronysed, however, what if they used a canvas to get in the scene, a canvas that has the same colour of the laminate floor, hiding under there belly down to get into the...
View ArticleGeneral Discussion: Forensic Certification and Career transition question
@BitHead Thank you for the feedback. Yes i am planning to take FOR408 class at the DFIR conference. Nope, My employer doesn't work in the forensic domain. This is outside of my day to day job domain. I...
View Article