Mobile Phone Forensics: burned SIM card contact
S1gnal wrote: 1.) is this a normal occurrence in a SIM cards. 2) what are some of the causes ( over charging, extreme external climate, ...) 3.) Most importantly any one's personal experience with...
View ArticleGeneral Discussion: ExFAT version 2
I have seen two TexFAT file systems like this from Windows 7 phones and the only tool that was able to interpret the filesystem properly was X-Ways.
View ArticleGeneral Discussion: What's happened to RAPTOR?
Just for the record I use Opera (the "real" one, Presto engine). jaclaz
View ArticleMobile Phone Forensics: Locked Iphone 5s
randomaccess wrote: ... have to figure out how to take that level of detail on a photocopy though If you check the "original" video, it seems to me like instead of a megapararatransnuclear magnetic...
View ArticleClassifieds: PC-3000 flash ssd edition for sale
I'm an entrepreneur and I bought one of these a year and a half(?) ago to start (yet another) business. Never got that far though, so now I'm selling it. It's been out of the box maybe 5 times, I've...
View ArticleServices Required: Hitachi firmware password reset
Igor_Michailov wrote: It costs ~3000$. Would you like to pay ~3000$ ? As a favour for a friend, I'm afraid not.... Ben
View ArticleForensic Software: Software needed no clue
Encase or X-Ways Forensics (not cheap for a license, but cheaper than what you paid the specialists)
View ArticleForensic Software: EnCase 7 - Export to Excel and Deleted Files Filter
Hi, I just started using EnCase 7.09.02. I reviewed the study guide and looked online, and there are two basic functions with which I would appreciate some assistance: 1) I want to export selected rows...
View ArticleForensic Software: Low level disk analysis tool for live machine
X-Ways doesn't require an installation, of the top of my head.
View ArticleGeneral Discussion: What's happened to RAPTOR?
questnz wrote: Here it is try this link, click on "Thank you Raptor" or just wait, it initiated downloadWell, if you are going to post a direct download link, at least post a direct download link...
View ArticleGeneral Discussion: Registry Key InstallDate / $boot, $logfile, $mft timestamps
Just for the record the "second image" is just a malformed link, here it is fixed: http://i.imgur.com/VGQ24vA.png Whilst the first one is clearly a view of *any* registry editor/viewer, which program...
View ArticleGeneral Discussion: File Carving
mscotgrove wrote: Nothing complex except that the carving program has to determine that it is a .xls rather than a .doc Quick test. Mount the .exe "as is" with IMDISK. Run Photorec on the drive letter...
View ArticleGeneral Discussion: replacing files or moving files is as secure as wiping?
electronic_x wrote: a) Regarding my first question, the applications I am speaking of are Microsoft word 2000 , 2010, and Microsoft office 2010. I do not understand how and where any previous word...
View ArticleGeneral Discussion: ExFAT version 2
OK, someone noticed, in 2012. http://aut.researchgateway.ac.nz/bitstream/handle/10292/4123/LeY.pdf?sequence=3 I won't comment on the actual utility/level of the thesis. jaclaz
View ArticleGeneral Discussion: replacing files or moving files is as secure as wiping?
electronic_x wrote: Sorry, I mentioned about te 35 passes, as you mentioned it, and said about performing these amount of passes, what really sounded very strange. It was a simple hint (you may look...
View ArticleGeneral Discussion: What's happened to RAPTOR?
questnz wrote: Thank you for link would be enough. I noticed that you didn't bothered to provide one either Well, considering that Members of this Forum are largely either professional or students in...
View ArticleGeneral Discussion: Registry Key InstallDate / $boot, $logfile, $mft timestamps
@ athulin Thank you very much for your detailed post. It all made logical sense to me and now allows me to think in a different way to understanding the problem @jaclaz thank you for fixing the...
View ArticleGeneral Discussion: How to use a RAM image to decrypt "encrypted containers"
Hi, What i have is a memory dump of an encrypted hard drive, however it has been taken while the pc was logged on (so logically unencrypted). This was done for tests purposes. How do i take a "PGP...
View ArticleGeneral Discussion: chances of decrypt an encrypted volume in external HDD
Sorry, I donĀ“t understand totally: Igor says of course password can be cracked. From what mscotgrove says, it seems that it is very difficult or near impossible.
View Article