Mobile Phone Forensics: Android Backup - Shared? i545
I'm performing a file system extraction on a Samsung SCH-i545. I am using Cellebrite UFED Ultimate. I am given the option of: Android Backup - NO Shared & Android Backup - with Shared What is the...
View ArticleDigital Forensics Job Vacancies: Cyber Incident Response Senior Manager - London
Our client is looking to recruit for a Cyber Incident Response Senior Manager for their offices in London. They are currently looking for a Senior Manager to set up reactive forensic capability with...
View ArticleGeneral Discussion: Audio forensic, where to start
armresl wrote: It's a small community. I started with training from Russia on sound principles and followed it up with software and hardware training in Canada, then vendor specific training in the US....
View ArticleGeneral Discussion: Unidentified crypto tool - TQ_cryptosys
Passmark wrote: 2) Run a 'strings' like program over the .exe to extract out all the strings from the .exe itself. Might turn up some interesting stuff. e.g. the web address of the developer If you...
View ArticleMobile Phone Forensics: Oxygen/Passware bundle
@NatalyKou- Thank you for the reply. I do work in a lab that is currently running both AMD and NVIDIA GPU cards. I was wondering if there was any advantage to running the bundled software over running...
View ArticleMobile Phone Forensics: iphone 4s physical
can any one please suggest a good method to acquire a physical dump from a jail broken 4S thank you
View ArticleGeneral Discussion: Windows 7 thumbcache_idx.db
ercompfor wrote: I was wondering if anyone had any insight into the thumbcache_idx.db file in Windows 7. In Windows Vista, you could determine the last modified date/time. That appears to have changed...
View ArticleMobile Phone Forensics: i9100T usb port problem
can any one help with a problem ? galaxy s2 charging but no pc will recognize it not even cellebright. tried: different cables , replacing the usb port , replace the whole flex cable (the whole usb...
View ArticleMobile Phone Forensics: Need to remove pattern lock without USB debugging...
Can you access a computer they have used? You may find a google username/password stored in the browser...
View ArticleGeneral Discussion: Exchange 2010 Rule-based Forwarded Email
Thank you for the reply. You are correct when you say understanding how the email was sent would be helpful. That is exactly what I am trying to figure out. I know that the user's logon account had...
View ArticleGeneral Discussion: Windows 7 Recycle Bin
... and we do not know the file system either.
View ArticleEmployment and Career Issues: Getting Into eDiscovery as a Freelancer/Consultant
Hi, I'm new to this forum. I hope you don't mind me asking a couple of questions. I own a small IT consulting and management firm that serves the small to mid-sized business market. For a couple of...
View ArticleForensic Software: Encase v5 still usable for NTFS images?
Just use Autopsy 3.10 It's free and works great! Autopsy
View ArticleMobile Phone Forensics: Need to remove pattern lock without USB debugging...
As mentioned Cellebrite UFED Touch and UFED 4PC has this model supported for physical extraction more than 6 months with lock bypass using its boot-loader method. Coming UFED 4.0 release will add many...
View ArticleMobile Phone Forensics: com.atebits.tweetie.compose.attachements
Hello DenMo, I have had pictures in the "com.atebits.tweetie.compose.attachments" folder of an iPhone 4. I did testing with an exact make and model and found that pictures that were tweeted from the...
View ArticleMobile Phone Forensics: Windows Phone Forensics
A good starting point would be to parse the files and data fully/correctly first. Then those of us that are recovering data from Windows Phone devices could spend less time doing it "old school" style....
View ArticleEducation and Training: Best online Mobile and Computer Forensics Courses?
There are some many different offerings out there fore mobile and computer forensics classes. I'm wondering which courses you have taken and enjoyed? I have taken the CCE Bootcamp as well as a number...
View ArticleDigital Forensics Job Vacancies: Electronic Evidence Specialist 2 Positions...
2 full time positions are available with the State Electronic Evidence Branch (SEEB) within the NSW Police, Australia. CLOSING DATE: Sunday 21 September 2014 State Electronic Evidence Branch (SEEB) is...
View ArticleMobile Phone Forensics: Nokia Lumia 610
Hello, I used the RIFF box to obtain a .bin file from a WP7 Nokia Lumia 610 and partition 11 (6944MB) in size has no file format therefore OS Forensics, EnCase or FTK will not map this partition. I...
View ArticleMobile Phone Forensics: Windows Phone Forensics
RonS wrote: Check your details again. There is no physical extraction solution for Windows Phone devices. Thanks for the hint, I indeed missed that one. Cheers, Ben
View Article