General Discussion: Many index.dat entries with same timestamp
Hi all, I am working a new case and when viewing index.dat history in NetAnalysis I am getting a lot entries with the same time (up to the second). This is when viewing the master index.dat. What I see...
View ArticleDigital Forensics Job Vacancies: Computer Forensic Consultant, London £35K-£40K
Our client is an International Consulting firm seeking a Senior Computer Forensic professional. You will be involved with investigation of complex computer related incidents, using computer forensic...
View ArticleGeneral Discussion: Setupapi.dev.log query
keydet89 wrote: There's no reason why you should. Good - but I did. keydet89 wrote: what value does telling a client that "there's no sign of these devices in setupapi.dev.log..." hold, without...
View ArticleMobile Phone Forensics: Locked Nokia Lumia
JTAG extraction will bypass the passcode. UFED has released support for SMS and call log decoding. XRY has also just released decoding for apps such as WhatsApp and Facebook....
View ArticleEmployment and Career Issues: Advice for starting a career in Digital Forensics
CCL Forensics is based within traveling distance of Birmingham, in Stratford-upon-Avon. http://www.cclgroupltd.com/about/job-vacancies/
View ArticleGeneral Discussion: Office365 In-place discovery export query
I maybe required to pull down data from an Office 365 environment. The data has been collected using the In-Place eDiscovery & Hold. There are two options as I see it for data collection, Exchange...
View ArticleForensic Hardware: External hard drive eSATA vs USB
Dndschultz wrote: Does the case have some sort of a controller card or something? It depends on the actual EXACT make/model of BOTH case and actual hard disk (something that you haven't yet detailed)....
View ArticleEducation and Training: Need help
hi. my name is Ahmed i am in Malaysia and doing my master degree by research . i would like to help me my topic in File carving of MPEG-4 using Stream Carving Methods . if you have any idea about that...
View ArticleMobile Phone Forensics: Locked Nokia Lumia
Thanks for the advice peoples, I did notice that UFED had listed JTAG decoding as a possiblity. I don't have the necessary hardware to perform a JTAG but under the circumstances the boss may allow me...
View ArticleDigital Forensics Job Vacancies: Digital/Forensics Investigations Manager -...
My client, a market leader in the digital / forensics investigations space are currently looking to appoint a Digital Investigations Manager / Senior Digital Investigations Team leader. The ideal...
View ArticleEmployment and Career Issues: Big 4 Interview - 'Commercial Awareness'
Hi, I'm a graduate just getting into Digital Forensics and have an interview at a Big 4 company coming up. 'Commercial Awareness' is one of the main things that the interview will involve. I was hoping...
View ArticleDigital Forensics Job Vacancies: Forensic Analyst/Malware Research Vacancies...
Foregenix Ltd are further expanding and looking to fill two roles within our growing team. The first, for a forensic analyst with hands on experience and an aptitude in computer forensics. The second,...
View ArticleGeneral Discussion: Setupapi.dev.log query
Chris_Ed wrote: First question that springs to mind - what's the installation date of the OS? If it's significantly different to 24th March then it would more strongly suggest some kind of "log...
View ArticleMobile Phone Forensics: Nokia Lumia 630
Does anyone have any information on taps for the Nokia Lumia 630? I just received one of these and I processed it with UFED Ultimate and Oxygen, neither was able to get the information we are looking...
View ArticleMobile Phone Forensics: iPhone is disabled connect to iTunes
[quote="jaclaz"] mark_adp wrote: I think that DFU mode is possible on the iPhone5, but there is not (yet) a method to dump the data. <img src="images/smiles/icon_confused.gif" alt="Confused"...
View ArticleGeneral Discussion: Finding RAID...
Maybe was only the partition table damaged. Have you tried some file carving with photorec, scalpel or foremost ? Then, if you can't find any valid file, the disk may have been secure erased or may...
View ArticleServices Required: Physical Image of Blackberry 9720
Isn't pysical image of Blackberry 9720 encrypted?
View ArticleGeneral Discussion: Finding RAID...
Find MBR/Boot/Superblock to figure out what file system is used. If NTFS it's pretty easy to understand if drive belonged to RAID or not - find MFT (by GREP "FILE0" or hex). Each record has attribute...
View ArticleDigital Forensics Job Vacancies: Staff Information Systems Analyst (Examiner)...
The California Department of Justice (DOJ) announces an exceptional career opportunity to work in an exciting program committed to providing best-in-class digital forensic assistance to California law...
View Article