General Discussion: Looking for program/script to carve out dates from a file
PaulSanderson wrote: RevEnge will search for a date (in one or more of about 50 formats) that is within a specific range. It won't carve per se but you can point it at a file select DOS dates and a...
View ArticleGeneral Discussion: SonicWALL CDP 110 Backup Appliance?
Anyone familiar with the SonicWALL CDP 110 backup appliance? I obtained an image from the drive in one of these devices and I'm wondering about how the backups are stored... upon quick inspection, it...
View ArticleMobile Phone Forensics: SIM partitions
Update (U)SIM Examination (Physical) Pt2 - http://trewmte.blogspot.co.uk/2013/05/usim-examination-physical-pt2.html
View ArticleGeneral Discussion: Trying to gather evidence from chat fragments in pagefile
You might be better off by using a specialized tool like ours. Belkasoft Evidence Center (Pro and Ultimate editions) include the ability to carve page and hibernation files as well as live memory dumps...
View ArticleGeneral Discussion: Analysis Question
hydrocloricacid wrote: Maybe a project for someone for Registry Ripper ... Already being done...take a look at version 2.8.
View ArticleGeneral Discussion: Mount an LVM ext4 partition from a spanned EWF image?
looking once on this page .... Mikas Blog With this tutorial I mounted a hard disk from a nas with ext4 and dynamic disk. I use grml-forensic. K.W.
View ArticleMobile Phone Forensics: Mobile forensics after factory reset
Hello trewmte, thanks for the amazing write-up and I completely agree with the implementations that you suggested. But my question remains: Most people use a classical 4-digit pin number to protect...
View ArticleMobile Phone Forensics: iphone4 ios upgrade to ios6 can be Physical Extraction?
Hello, I think, presently, there are no ways of acquiring a physical image of the iPhone running iOS 6.1, at least not unless you jailbreak it.
View ArticleMobile Phone Forensics: BlackBerry Data Security - Practical Concerns
Greetings. I am trying to strike a balance between security and convenience. Specifically, I am trying to understand just how important password length is in securing the data stored on a password...
View ArticleGeneral Discussion: Recovery of a text file with damaged MFT (zero sized file)
Cults14 wrote: Quote:: I can open the LogFile.csv with Excel, but it gives me an error: "File not loaded completely". anyway, I can see 65536 records in the spreadsheet. Generally this discussion is...
View ArticleGeneral Discussion: Looking for program/script to carve out dates from a file
FYI I found what that program was which I was searching for. it's "FDTE - File Date time Extractor" from "www.digital-detective.co.uk" Quote:: " This utility has been designed as a forensic research...
View ArticleGeneral Discussion: OBJECTS.DATA: Purpose, Structure
Thanks for the link (and stepping up to the plate), Harlan. I will take a close look at the info.
View ArticleMobile Phone Forensics: iphone4 ios upgrade to ios6 can be Physical Extraction?
Logical acquisition should still work, or do you need to try and recover deleted data?
View ArticleMobile Phone Forensics: S. Korean Phone list
Hi all, Was wondering if anyone here has a comprehensive list of popular S. Korean Domestic Phone models for Samsung, LG and Pantech. Apparently, Korean phone manufacturers use different model numbers...
View ArticleDigital Forensics Job Vacancies: Cyber Incident Response Senior Manager, London
Role: Cyber Incident Response Senior Manager Salary: £60,000 - £85,000 + benefits Location: London (City) Start date: ASAP Role Summary: A global consulting firm are looking to appoint a Senior Manager...
View ArticleForensic Software: Paraben PS2 Commander a Legit option?
isth wrote: -Doesn't do a great job at recovery of double-deleted items. (it does recover some but I have had more success with other tools). I know this is an old post but I have a related question. I...
View ArticleMobile Phone Forensics: Mobile forensics after factory reset
Alistair wrote: Most people use a classical 4-digit pin number to protect their device (longer passwords are harder to remember, and also a hindrance to usability according to casual users), this comes...
View ArticleGeneral Discussion: Recovery of a text file with damaged MFT (zero sized file)
okay thank you guys for all your suggestions regarding CSV editors. I will try at least one of them. @Cults14: yes, my Excel is "2002", according to the Help>About menu item.
View ArticleMobile Phone Forensics: Contradictory test results:UFED vs XRY vs SIMcon
I had a small test covering common SIM examination tools, UFED, XRY, SIMcon. The results were more contradictory than expected, sometimes even opposing. The contents, time stamps and status of the SMS...
View ArticleGeneral Discussion: Looking for program/script to carve out dates from a file
PaulSanderson wrote: Oops I was thinking of dcode - FDTE does exists but its an old old program (my version is dated 2002)Sure it exists <img src="images/smiles/icon_smile.gif" alt="Smile"...
View Article