General Discussion: Games Console Forensics
(Slightly OT): Additionally; XBOX360 has a GREAT amount of information that can be obtained when importing into various Forensic Software packages. Once again; dependent of a few caveats, ie: If they...
View ArticleGeneral Discussion: Audio Forensics
So this is the metadata of the file, its an mp4 file however it shows that its a 3GP, so any interesting atrifacts that indicate its been tampered with? Thanks
View ArticleGeneral Discussion: Obtaining times and dates for name change to user account XP
C:\Users\Alex\Desktop\RipXP>ripxp -r sam -d "C:\Users\Alex\Desktop\RipXP\RP1007" -p samparse.pl sam may not be a valid hive. Unable to determine hive file type for sam "RP1007" was an example...
View ArticleForensic Software: EnCase V7 EnScripts
Dear colleagues. I have a question related with EnCase 7 enscripts. Is it possible to use EntryClass (EnScripts) in EnCase v7 to get a view of compressed file structure like in EnCase v6 in entries...
View ArticleMobile Phone Forensics: PList and .db Files
@tpd2021, As I'm not LE I cannot say for sure that the thumb drive received back will work, but assuming Apple is providing a simple iOS backup (similar to what's done through iTunes) Cellebrite should...
View ArticleGeneral Discussion: iPhone 4 hacked??
Was only one person reporting this issue? It may be that the recipient was the one whose phone had a virus/malware and that it was simply spoofing communications from his contact list.
View ArticleMobile Phone Forensics: Snapchat - Image retrieval
It is possible to save the unviewed images. The newest version of the SnapChat-App encrypt the images. But you can easily decrypt them. The App use an AES 128bit encryption algorithm with a 16 char...
View ArticleGeneral Discussion: Can a virus d/l CP to my computer
I would add that, more generally, the good ol' same questions should be asked (and answered): WHO? WHEN? WHY? HOW? CUI PRODEST? (or CUI BONO?): http://en.wikipedia.org/wiki/List_of_Latin_phrases_(C)...
View ArticleGeneral Discussion: Is your neighbour a hitman?
If you live in a suburb in the UK, it is seemingly a possibility, according to a recent study that gained the honour of being reviewed at Improbable Research:...
View ArticleMobile Phone Forensics: Snapchat - Image retrieval
I 2nd PM_SQ's comments! Interesting read, good work gharti!
View ArticleEducation and Training: Essay research on Cyber forensic.
Actually I am the least one deserving the "expert" title, particularly related to "digital forensics", JFYI: http://www.forensicfocus.com/c/aid=65/interviews/2013/jacopo-forum-member-jaclaz/ What you...
View ArticleGeneral Discussion: 123flashchat artifacts
Has anyone got any advice on investigations relating to 123flashchat? I have been asked to recover data to help identify 'user a' by examining a computer belonging to 'user b', 'user b' has been...
View ArticleDigital Forensics Job Vacancies: Digital Forensics Supervisor - Hampshire...
N.B. The closing date has been extended to 10th February.
View ArticleMobile Phone Forensics: Snapchat - Image retrieval
And here is my little program in Java for decrypting a single picture: // Example code showing SnapChat JPG decryption // for the unseen stored pictures import java.awt.image.BufferedImage; import...
View ArticleEducation and Training: Essay research on Cyber forensic.
With reference to the indiscriminate use of the "cyber-" prefix: http://www.forensicfocus.com/Forums/viewtopic/t=9892/ And: http://www.forensicfocus.com/Forums/viewtopic/p=6569144/#6569144 jaclaz
View ArticleGeneral Discussion: Windows 7 MBR system unable to view Windows 8 GPT HDD
There is no known reason, to the best of my knowledge (and of course given the data in your post) why this should happen. You don't mention make/model (and size) of hard disk. At first sight, I find...
View ArticleGeneral Discussion: iPhone 4 hacked??
Does the contact/3rd party who received the messages have an iPhone as well?? If yes & if he received the messages via the persons Facebook, there is a way of identifying whether the mobile phone...
View ArticleGeneral Discussion: password cracking
although this isnt possible i recommend you give Passware kit a shot. I've used it in the past and had pretty good results with it - http://www.lostpassword.com/ - certain files can be instantly...
View Article