General Discussion: Encase Training
We are seeking someone who is an expert in Encase 7.09 to train an employee on advanced use. Please message us
View ArticleEducation and Training: Encase On Demand Training
Anyone want to sell or lease a seat for Encase v7 training? Maybe allow someone to borrow a seat for a few days in trade for some forensic equipment? We have a new employee that needs training.
View ArticleGeneral Discussion: LTO 4 Backup Decrypt
Index Engines does work well and is quite sophisticated. One of the simpler things you can do in the first instance is use your favourite version of U**x or L***x with an LTO4 tape drive connected to...
View ArticleForensic Software: [Looking for testers!] Automatic Skype SQLite/DBB carver.
Bendroid wrote: Hello, please take my apologies for resurrecting this ancient thread, but the lack of replies here made me wonder if this tool is still working with latest Skype DBs? If so, would it...
View ArticleGeneral Discussion: LTO 4 Backup Decrypt
Dump the first couple of blocks with dd and post them here (or email to me) paul@sandersonforensics.com and i'll see if I can let you know what format it is. paul@sandersonforensics.com
View ArticleMobile Phone Forensics: Cellebrite vs. all others in mobile phone collection...
This is truly a case of getting what you pay for. I have other tools, but Cellebrite is always the first to be employed and usually retrieves more good information than all the other tools I have. If I...
View ArticleEducation and Training: Encase On Demand Training
GARRETTDISCOVERY wrote: Anyone want to sell or lease a seat for Encase v7 training? Maybe allow someone to borrow a seat for a few days in trade for some forensic equipment? We have a new employee that...
View ArticleForensic Software: [Looking for testers!] Automatic Skype SQLite/DBB carver.
Thanks for all your input! @francesco: answered PM @Paul: I will check them as well, thanks for pointing me. Ben
View ArticleGeneral Discussion: X-Originating-IP with two IPs ?!?
wechselberger wrote: A Mail Header shows after X-Originating-IP two IPs. What does this mean? Whatever the MTA (or MUA or firewall or application proxy or ...) that created it means. (It needn't come...
View ArticleMobile Phone Forensics: CSA, propagation and keeping norms
International Telecommunications Union and CSA Were the standards to be made binding that could have political implications / ramifications regarding national sovereignty etc. However, a standard...
View ArticleMobile Phone Forensics: CSA in the UK vs USA
"In the US your system is designed as a layer cake of entitlement to knowledge." Greg, Truer words have never been spoken! Cheers!
View ArticleMobile Phone Forensics: iPhone Physical Aquisition iOS7
I am trying to take a physical image of a iphone 5s iOS7 via netcat and dd. I have copies netcat and dd from my mac to the iPhone ,and know when i type in which dd in the iphone it shows the directory....
View ArticleEducation and Training: BEST UNIVERSITIES FOR COMPUTING FORENSIC IN UK?
Hello, I am thinking to study a MSc in Computing Forensic in UK. I have two questions about that. 1-Could anyone give me some advice about which university will be the best to study this? 2-Which...
View ArticleMobile Phone Forensics: CSA in the UK vs USA
Email sent to you (see PM message) With so much info available it may be your Federal support is not being difficult merely just in a restricted position of being lawfully unable to reveal due to...
View ArticleGeneral Discussion: hard disk recovery
thanks the model is Maxtor DiamondMax plus 8 40 GB
View ArticleMobile Phone Forensics: Cellebrite vs. all others in mobile phone collection...
Cellebrite is a very good product but most examiners should use dual tool verification so Microsystemation XRY is also a product worth considering.
View ArticleClassifieds: Encase V6 Dongle For Sale
Hi, would take 400 + vat. (Currently 20% in UK).
View ArticleForensic Software: Someone experience with GRR from Google?
I am interested in this too. I work with moderately large distributed environments, and good ol F-Response and EE still require substantial IO back to the examiner. Over a VPN or WAN it falls flat as...
View ArticleGeneral Discussion: hard disk recovery
Thanks all! I will check the link! Best regards.
View ArticleGeneral Discussion: Western Digital SmartWare
I came across one last week. The way I proceeded is as follows 1. I removed the hard drive from the enclosure. 2. Using Image Masster Solo I created a clone (single capture) on another hard drive...
View Article