General Discussion: Dropbox
The dropbox.cache folder contains encrypted files, the below is a quote from Jad (Magnet forensics) regarding a query I sent him about those files.. Quote:: In regards to the files in the Dropbox cache...
View ArticleGeneral Discussion: Volatile Memory Collection
Xways Forensics can capture the RAM as well I believe.
View ArticleGeneral Discussion: Ask reliability for evidence web browser action ???
Thank you joe_t i will try your solution ^/\^
View ArticleDigital Forensics Job Vacancies: Business Developer - eDiscovery Services -...
My client a global consultancy firm, is looking for a proven Business Developer to join their eDiscovery team in London. Responsibilities • Sales and marketing activities are broad-based and include...
View ArticleGeneral Discussion: Collaboration with Lawyers?
Adam10541 wrote: Surely you aren't naive enough to think that mud doesn't stick? Guilt or innocence is irrelevant when it comes to public perception. If you doubt that just ask the average American...
View ArticleMobile Phone Forensics: Identifying a main Kik user account
DING DING DING! We have a winner! THANK YOU! That marries up exactly with the User Account extracted. Still don't know why the PDF report had a different user, but thats OK, I have the data I need....
View ArticleGeneral Discussion: Dropbox
Bendroid wrote: @Igor - read again <img src="images/smiles/icon_razz.gif" alt="Razz" title="Razz" /> Indeed! Bendroid wrote: @OP: I can only assume there was an older version of Dropbox with...
View ArticleGeneral Discussion: From where can I get safeback?
vijips wrote: I asked for the program to create some images and analyse the format of the disk image. If you do find a copy somewhere, please post.
View ArticleGeneral Discussion: "RAID" help!
PRINTED WIRING ASSY, CONTROLLER, PERIPHERAL COMPONENT INTERCONNECT EXPRESS , SERIAL ATTACHED SCSI, PERC6/I, ADAPTER If you can get into the controller software (typically Ctrl-R) you should see the...
View ArticleEmployment and Career Issues: Internship in Ireland
Hello, This seems like the perfect forum to post my question. I'm looking for companies in Ireland were I can do an internship with graduation assignment. Why Ireland? Because they have major companies...
View ArticleForensic Hardware: Running Forensics Software in Bootcamp on Mac
I'm looking into getting a new laptop for the lab, and am wondering if any of you have had any experience running any general forensics software in bootcamp on a mac. I'd like to save the money of...
View ArticleMobile Phone Forensics: Galaxy S3 Arrrghhh!!
Arrg, sry for not being specific enough, my bad. Yes, you're absolutely right, need to have ADB up and running. There is a minimal ADB bundle floating around which just contains fastboot and adb...
View ArticleGeneral Discussion: From where can I get safeback?
jaclaz wrote: I was wondering about the reason why one would want to get an outdated program not used anymore since years At the time I heard about SafeBack, I didn't know whether it is obsolete. I...
View ArticleGeneral Discussion: Facebook Profile Saver
many thanks, you can email Jo - she'll forward to me or catch me on rpatel@ regards, ross
View ArticleForensic Software: Autopsy 3: The Limitations
Chris_Ed wrote: If I remember correctly, Guidance used to say that if the validity of EnCase as a tool is questioned, they will come to court and defend it. Not sure if it's still the case though. Yep,...
View ArticleGeneral Discussion: Active file and deleted file with identical timestamps
I think I would want to know exactly what metacarving does - i.e. what the published description of the process is? Try using a different tool to carve the data and see what it comes up with. Have you...
View ArticleGeneral Discussion: Setupapi.dev.log query
Hi I'm looking at a Win7 Enterprise SP1 system. Setupapi.dev.log file creation date is 24th March 2014....
View ArticleGeneral Discussion: "RAID" help!
There is something "wrong" (no offence intended <img src="images/smiles/icon_smile.gif" alt="Smile" title="Smile" /> ) in your report, and IMHO *something* doesn't sound "right" in your...
View ArticleGeneral Discussion: "RAID" help!
jbarber wrote: I don't know. I tried to read all three of these disks through EnCase as a preview and I didn't see anything that looked like an OS. Sure, you won't find on any of them "anything that...
View Article