Employment and Career Issues: Forensic Jobs in Ontario?
jamie wrote: Tremendously useful reply, though, Steve. Agreed. Life's just better when there are pleases and thank yous.
View ArticleEducation and Training: Newbie Student Questions About Algorithms
Thank you everyone for your information. I do understand the basic premise and certain algorithms - at this point we're learning about binary search algorithm and sequential search algorithm. Seems...
View ArticleGeneral Discussion: ExFAT vs FAT32 (deeper mechanics)
Rshullic wrote: The second is very interesting. It has to do with how legacy FAT (FAT 12/6/32) deletes a file, and also leads to an issue that I have had arguments with other people with. In Legacy FAT...
View ArticleDigital Forensics Job Vacancies: COMPUTER FORENSIC ASSOCIATE / ASSISTANT...
Our client, a global advisory firm is seeking to recruit a Forensic Technology Associate, Senior Associate and Assistant Manager in Dubai. This a great opportunity to develop your career in a growing...
View ArticleForensic Software: Selective Copy of Mac drive
Hi, I am looking for a good forensic tool that has the same capability as ftk imagers, as in, being able to select folders in isolation for imaging as apposed to an entire disk or volume. Ive tried FTK...
View ArticleGeneral Discussion: BCS Membership is it worth having?
hmorgan wrote: No. As far as I can see the only technical skill it demonstrates is the ability to fill in a direct debit form. This has to be my favorite quote so far from everyone thanks hmorgan that...
View ArticleGeneral Discussion: ExFAT vs FAT32 (deeper mechanics)
What a zero in a FAT cell of exFAT would mean is that since the file system was created/last formatted, a fragmented file never used that cluster. However, if during a forensics analysis you find a...
View ArticleForensic Software: Selective Copy of Mac drive
Are you working from a Mac or PC? If you are on a PC and you have FTK imager which does what you want why are you needing another tool?
View ArticleGeneral Discussion: SATA driving imaging issue (137 GB limitation)
Just asking the obvious here in case you haven't done it as I know sometimes there is a temptation to look for more technical answers first....but... Have you used Windows disk manager to confirm that...
View ArticleGeneral Discussion: BCS Membership is it worth having?
As you're a student, "Digital Forensics with Open Source Tools" by Altheide and Carvey might be useful
View ArticleForensic Software: The X-Ways Forensics Practitioner's Guide
Great presentation. Will be especially useful to the folks in my office who haven't done the training yet! Thanks for making it available.
View ArticleGeneral Discussion: $MFT Resident data
can you post up the files when they are at the maximum data attribute length for each process? (I dont know why that sentence was so difficult to phrase)
View ArticleDigital Forensics Job Vacancies: eDiscovery Consultant - London - £35,000 -...
Our client, a global but boutique consultancy, are seeking an eDiscovery Solutions Consultant to join their rapidly expanding Forensic and Litigation team in London. As an eDiscovery Consultant, you...
View ArticleMobile Phone Forensics: FTK Mobile Phone Examiner
Hello, i'm using FTK and MPE as primary tool and i'm very disapointed. No bluetooth support (lots of chinese phones only extract data this way), call the accessdata, and they are not planning to...
View ArticleEducation and Training: Newbie Student Questions About Algorithms
hc4n6 wrote: In order to make a pizza, you need to follow some steps. Lot of steps needed, flour, water, yeast, mixing them in the right proportion, an oven, timing issues, a mess. <img...
View ArticleForensic Software: OST to PDF
pbobby wrote: The only issue I have with Intella is that mindmap searching is their only discriminator. The graphical front end wraps around a whole bunch of open source backend processing. Take a look...
View ArticleForensic Software: Bitlocker issues with Linux forensic tools
It works with dislocker 0.2.3 from github. Sift with it's underlying Ubuntu Karmic seems to be to old, so that errors have to been disabled while doing the make. o Installation in Sift: Code:: cd...
View ArticleGeneral Discussion: SATA driving imaging issue (137 GB limitation)
Getting the really obvious stuff out of the way: Is 137 GB the size of the image - have you enabled compression ? When the drive is previewed how many logical volumes are there - have you imaged only...
View ArticleMobile Phone Forensics: FTK Mobile Phone Examiner
Adam10541 wrote: MPE has a long way to go before it matures as a forensics tool, in my opinion they shot themselves in the foot in a huge way by limiting the software by locking it in to FTK. How is...
View ArticleDigital Forensics Job Vacancies: Cell Site Analyst (urgent requirement), UK
CY4OR has an urgent requirement for an experienced Cell Site Analyst to conduct analysis both onsite and based on supplied call data records. Using Cell Site Analysis to assess possible locations of...
View Article