Quantcast
Channel: Forensic Focus Forums - Recent Topics
Browsing all 20107 articles
Browse latest View live

Digital Forensics Job Vacancies: EY Switzerland is looking for Senior...

Senior E-Discovery - Fraud Investigation & Dispute Services Everyone has their favorite spot – somewhere to think things through, get to grips with exciting tasks and make a difference. At EY...

View Article


Forensic Software: EnScript - Registry - EnCase 7

Kwilley wrote: ..I really valued the guidance. I see what you did there.

View Article


General Discussion: Indication of computer reinstallation

Thank you very much for your reply!

View Article

General Discussion: Mac target disk mode

I have not encountered writes to the subject drive when using Target Disk Mode unless the person doing the acquisition had an oops moment and did not get TDM activated on the first try or they did not...

View Article

General Discussion: How to identify date/time change in Mac OS

Are these helpful in regards to what you are looking for? The Apple System Log – Part 1 Analysis & Correlation of Mac Logs

View Article


Digital Forensics Job Vacancies: e-Discovery Project Manager with...

My client based in London are looking to take on an additional e-Discovery Project Manager. You will have an understanding of the EDRM but the roles focus will be on managing projects, designing...

View Article

General Discussion: Link a Micro SD card with Spotlight-V100 to a specific Mac.

I am having difficulty linking a Micro SD card to a Macintosh computer. The Memory card has a Spotlight-V100 folder within its root, so i know it has been conected to a Macintosh at some point (it is...

View Article

Forensic Software: Download full web page

Alberto wrote: We need to download complete websites. A picture is worth a thousand words.

View Article


General Discussion: ewf file (E01) write back to disk - how?

ewfexport is part of the libewf suite and a bit easier to use. Code:: ewfexport myAcquiredImage.E01 will do the trick. The tool itself will prompt you for the required information. The default output...

View Article


Digital Forensics Job Vacancies: Experienced Digital Forensic Examiner in Boston

Stroz Friedberg is a leading global digital risk management and investigations firm specializing in digital forensics, data breach and cybercrime response, electronic discovery, security risk...

View Article

Digital Forensics Job Vacancies: Experienced Digital Forensic Examiner in San...

Stroz Friedberg is a leading global digital risk management and investigations firm specializing in digital forensics, data breach and cybercrime response, electronic discovery, security risk...

View Article

General Discussion: Flaw in evidence verification process?

On further check, the idea hinted in the PS above is being implemented within/with the support of digitalcorpora, see here: http://digitalcorpora.org/archives/391 And there is an article (of course...

View Article

Forensic Software: Download full web page

Just wondering, Alberto, is there a reason why you don't want to or can't use httrack (such as it failing on you already or it not being anonymous enough)? From my experience, httrack is one of the...

View Article


Education and Training: Integrating Sleuthkit into c++

No, I am experienced in C++. But Sleuthkit is completely foreign to me...

View Article

Digital Forensics Job Vacancies: Bank of America:Chicago Junior forensic...

Rare opportunity for a junior to mid level forensic investigator in the Windy City. This is an employee role, not contractor or consultant. Details are at Requisition 1400038010...

View Article


General Discussion: ewf file (E01) write back to disk - how?

OK. Thanks. Kurt W.

View Article

Mobile Phone Forensics: Using DD to image smartphones

Depending upon your requirements dd can be useful but doesn't produce a complete image as it is known dd omits OOB (out-of-band) metadata etc. There are other trade off methods. One that might be...

View Article


General Discussion: Link a Micro SD card with Spotlight-V100 to a specific Mac.

Thanks, I will give it a try Monday and let you know the results.

View Article

General Discussion: Physical RAID Imaging

mscotgrove wrote: HP Media Vault is typically defined as a RAID, but often is configured as a JBOD with 'funny' allocation sections. But does it run Windows Server 2003 or allows for more than two...

View Article

General Discussion: Physical RAID Imaging

laughingman_nicoli wrote: Situation: Need to take a physical image of a RAID. Actually two RAIDs. First: How do I figure out what version of RAID this is? Second: What is the best way to take these...

View Article
Browsing all 20107 articles
Browse latest View live