Forensic Software: File concatenation on recovery from unallocated space
SteD wrote: I then copied, deleted, copied, deleted, formatted, copied, deleted some, copied, overwrote, deleted, etc etc onto the USB stick, and then worked on it, and recovered some of the deleted...
View ArticleGeneral Discussion: SyncToy v2.1
Since my posting I've had success parsing these files (albeit only manually) and each file synched comes with it's creation time (source disk), last modification (source disk), file size and filename...
View ArticleGeneral Discussion: Error mounting E01 image in FTK Imager
Hi All, I have received response from the Prof and his MD5/SHA1 are the same as the values I generated. At this point, I will telnet into the school and use their encase. I am just curious as to why...
View ArticleGeneral Discussion: need to analyze virtualbox image .vdi
Found !! I can open it with foto ftk imager!!!
View ArticleForensic Software: X-Ways X-Tension C4All users-CETS & pic/vid library option
Update October 19 2014 download link to version 3.6.2.c 1drv.ms/1prWU2h -Fixed issue with extended character support of UTF-16 in XML. should show all but those 0xD800 – 0xDFFF characters. -Adds the...
View ArticleForensic Software: MD5 Hash file Manipulator for X-Ways
Updates to handle duplicate and unsorted values more efficiently Derek
View ArticleGeneral Discussion: virus Cryptolocker
Hi, Yes, CyptLocker can be dangerous, as it is a ransomware that are designed to block access of system and the hackers force you to pay ransom for decryption and recovering files. Mostly, the system...
View ArticleDigital Forensics Job Vacancies: Cyber Security Incident Analyst - Forensics...
Cyber Security Incident Analyst - Forensics - London In this role you will be working in a financial institution with the Cyber Intelligence team to identify sources of external incidents, investigate...
View ArticleGeneral Discussion: MAC OS x: network log
Hi, you can take a look at the following plist TCP/IP network history with timestamp : /Library/Preferences/SystemConfiguration/ com.apple.network.identification.plist network interface :...
View ArticleEmployment and Career Issues: Advice for starting a career in Digital Forensics
Hi all, my first post on this forum. I am just looking for some advice on the best way to get into the industry. I have a 2:1 BSc (Hons) in Forensic Computing but no experience within the field thus...
View ArticleDigital Forensics Job Vacancies: Digital Forensic Investigators,...
Hertfordshire Constabulary are currently looking for Digital Forensic Investigators for their Hi Tech Crime Unit at Police Headquarters, Welwyn Garden City. To apply, please follow this link. The...
View ArticleMobile Phone Forensics: Android Keypad Records?
Probably:) On an LG Nexus 4 (Android 4.4.2), XRY 6.11 interprets the words table within data\data\com.android.providers\userdisctionary\databases\usr_dict.db as "Device Keyboard Cache". This could be...
View ArticleGeneral Discussion: virus Cryptolocker
Evamendis, really <img src="images/smiles/icon_smile.gif" alt="Smile" title="Smile" /> , you should think a bit before posting incomplete/wrong info."Cryptolocker" is NOT "Cryplocker" and NOT...
View ArticleEmployment and Career Issues: Advice for starting a career in Digital Forensics
Why not show how good your investigative skills are by searching this forum, and then discover the many answers that have been posted to the many, many questions exactly like yours? In all seriousness,...
View ArticleClassifieds: Cellebrite-UME-36 + 53 Cables for Sales
I am not sure but I think the cables can be used with other cellebrite products likes UFED / Logical / Physical....
View ArticleForensic Hardware: External hard drive eSATA vs USB
If its indeed a WD external harddisk, it has encryption build into the USB-SATA controller inside the case (not controller on the HD). You could try to find a similar WD case with usb3/esata support...
View ArticleGeneral Discussion: Error mounting E01 image in FTK Imager
Hi Cults, After much digging, it turned out that the E02 and E03 files did not download appropriately. I deleted all and downloaded from scratch and finally got it to work. Thanks much for your help!...
View ArticleGeneral Discussion: Setupapi.dev.log query
Cults14 wrote: Any ideas? Was the question pertinent to your case, or just a curiosity?
View ArticleGeneral Discussion: OSINT - are there any gurus in the house?
I've found usersearch.org to be useful for this.
View Article