Services Required: Physical Image of Blackberry 9720
In UFED you can only do logical and File system extraction of BB 9720 only, no physical. Unless you do a physical dump of a similar bb profile.
View ArticleMobile Phone Forensics: iPhone is disabled connect to iTunes
Hi! I got a disabled iPhone 5 and the victim had not synced the phone with her computer (no mobilesync folder) HOWEVER she had at some point (maybe to charge the phone) connected the phone to her...
View ArticleGeneral Discussion: .PST/.OST analysis
It seems like all roads instead of leading to Rome lead nowadays to some Systools (not necessarily "Premium") software. jaclaz
View ArticleMobile Phone Forensics: Locked Nokia Lumia
If you were in the UK I would loan you my Riff Box which is collecting dust right now. Its not exceptionally expensive anyhow. I hope you manage to get the data for your friend.
View ArticleGeneral Discussion: Guessing RAID-0 parameters using file signatures ?
mscotgrove wrote: Personally, I don't think file signatures is the best starting point.Sure it is not (filesystems structures are actually much more handy <img src="images/smiles/icon_smile.gif"...
View ArticleEmployment and Career Issues: Big 4 Interview - 'Commercial Awareness'
I recently began working at one of the big four and have to say the interview process was one of the more pleasurable ones for me. For commercial awareness however keep up to date with business...
View ArticleForensic Software: vmware fusion + tableau usb 3.0 write blocker issues
hi, my company just purchased us new tableau usb 3.0 write blockers. We use mac's for our forensic machines running vmware fusion windows 8.1 virtual machines. vmware does NOT like the tableau usb 3.0...
View ArticleGeneral Discussion: Guessing RAID-0 parameters using file signatures ?
Im surprised noone mentioned this yet: DEFCON 17: RAID Recovery: Recover your PORN by Sight and Sound
View ArticleEducation and Training: Degree Path Advice..?
Hello, I currently attend Florida Institute Of Technology as a Computer Information Systems Major. I go online due to being active duty Air Force. I started this type of degree program because I want...
View ArticleMobile Phone Forensics: Create dd image as a whole (Without based on partitions)
Hi, I created dd image of /data and /system partitions of Android device. Is it possible to make an dd image of Android device internal memory as whole with out based on partitions? Thank you. indi
View ArticleMobile Phone Forensics: Motorola EX130
Hello, Has anyone been able to extract the physical data from a Motorola EX130? I've tried it with the Cellebrite UFED, but the EX130 was not supported... BR GH
View ArticleEducation and Training: Degree Path Advice..?
Active duty Air Force? I would do what ever I could to get into the Air Force Office of Special Investigations and then into the Defense Computer Forensics Laboratory.
View ArticleMobile Phone Forensics: Create dd image as a whole (Without based on partitions)
try running 'mount' command to ascertain the name of the device something like /dev/block/mmcblk0 then set the if as the device in your dd command, rather than a local partition.
View ArticleServices Required: Iphone5 Text Message Recovery.
Hi all, Thanks for replys. If anyone is local and able to help let me know. Graeme.
View ArticleEducation and Training: MSc in Digital Forensics (leading uni's)???
There is a list on this website too, but i'm not sure how up to date it is: http://www.forensicfocus.com/education
View ArticleGeneral Discussion: Trouble on files extraction in Autopsy..
What version of Autopsy? What does the file look like in hex? If you open the E01 in another program can you extract the file?
View ArticleClassifieds: FTK, MPE, Cellebrite and Write Blocker for sale
I have the following items for sell. All items no longer have SMS. PM me for details/offers FTK 5 $1000 MPE $500 Cellebrite UFED with Physical Analyzer Dongle $2000 Tableau T35es-R2 Write Blocker...
View ArticleGeneral Discussion: Trouble on files extraction in Autopsy..
I am using the last version of Autopsy. I don't opened it in hex editor. Which software may I use to open it?
View ArticleMobile Phone Forensics: Motorola EX130
I have had one of these lately and had feedback from XRY and Cellebrite that it cannot be done at the moment as it is a BREW OS phone and cannot currently be done with anything I have found
View ArticleGeneral Discussion: .PST/.OST analysis
Advanced Exchange Recovery works Well and i believe has the ability to run recovery. It's worth checking out.
View Article