General Discussion: Recovered Lotus Notes nsf files can not be opened
Georgefan wrote: Thanks for your reply so do you think there is any chance to recover a fragmented nsf file?Or is it possible to just extract email messages from the fragmented nsf file? As a first...
View ArticleGeneral Discussion: Internet Content Reviewer UK
There is the IWF (Internet Watch Foundation) in the UK. They focus primarily on IIOC/obscene publications. Unfortunately, they're not currently recruiting. If you wanted to look at copyright...
View ArticleDigital Forensics Job Vacancies: E-Discovery Sales Executive, UK
The Role The role will be Office/ Field based covering the UK and you will need to be able to travel throughout this area developing existing opportunities and forging new client relationships. You...
View ArticleGeneral Discussion: Recovered Lotus Notes nsf files can not be opened
> Thanks for your reply so do you think there is any chance to recover a fragmented nsf file?Or is it possible to> just extract email messages from the fragmented nsf file? Really depends of...
View ArticleForensic Software: Extracting all NTFS attributes
New tool: http://code.google.com/p/mft2csv/wiki/ExtractAllAttributes I have missed an option to easily be able to extract all NTFS attributes for a given file, not just the $DATA attribute. In one of...
View ArticleEmployment and Career Issues: How much is training to be evaluated against...
TuckerHST wrote: To attempt an apples-to-apples comparison of 12 credit hours with a year's experience, one might multiply 12 by 3 (hours in and out of class per week), then by 15 (weeks in a semester,...
View ArticleGeneral Discussion: Discrepancy in Word Document Dates
corey_h wrote: Alright, my curiousity got the best of me. I was looking at a different way to create a document; using the Save As function. I never tested this before. There is another way to create a...
View ArticleGeneral Discussion: Way to tell what program or process accessed a file?
twjolson wrote: That logs changes. But the original question asked about last access times. If a file was accessed, but not changed, why would it be in the $UsnJrnl file? I didn't say that it would...
View ArticleGeneral Discussion: NAND flash disk ECC
rs8191 wrote: Hello, jaclaz I have edited the previous post with the description of the NAND and equipped to better understand with an example of Hexdumpe. Thanks for that <img...
View ArticleGeneral Discussion: Recovered Lotus Notes nsf files can not be opened
joachimm wrote: > Really depends of various factors: * what are you after? * how is the resulting information going to be used as indicative findings or evidence? * how much data do you have? * how...
View ArticleGeneral Discussion: Way to tell what program or process accessed a file?
When I first started testifying I learned to stay away from words like absolutely, never, not possible. I would go and watch trials and see people get shredded when they painted themselves into a...
View ArticleEducation and Training: Training on how to be an expert witness is lacking.
2. Keep in contact with the attorney (good side or bad side- which ever you side you are testifying for) and go over the case and ask, "What are the issues we are facing?" You're not biased at all are...
View ArticleForensic Software: Time Stamp Mystery
Sorry for the confusion. My understanding from the forensic examiner who produced the xls {spreadsheet} files is they were decoded from data using a perl software program. Keith
View ArticleGeneral Discussion: Achieving the Computer Forensics Dream
Hello folks, i am a Nigerian and got to know about forensics in 2010. i am a currently studying chemistry but feel a deep passion for computer forensics and would want to help do my bit to make the...
View ArticleMobile Phone Forensics: JTAG - Galaxy Ace 2
In order to connect with this phone, you need to have the battery in (or use the Cellebrite power cable set connected to the USB power on the RIFF Box and have it turned on in the Advanced settings);...
View ArticleMobile Phone Forensics: Vietnam Phone D999i
Hi, Anyone came across Vietnam Phone Samsung Model D999i (Picture of the phone, Please click the link)...
View ArticleForensic Software: Time Stamp Mystery
writerkeith wrote: Yes, But the data is held as evidence by the computer crimes department and they want to charge $20,000 to scrub the data so that personal information is not released. So I can...
View ArticleEducation and Training: Training on how to be an expert witness is lacking.
sward6 wrote: Way to spin that and go off topic. Would this other thread be considered "off topic" or "connected"? http://www.forensicfocus.com/Forums/viewtopic/t=9275/ jaclaz
View ArticleGeneral Discussion: Recovered Lotus Notes nsf files can not be opened
Georgefan wrote: the resulting information is mainly used for indicative findings.It seems that the email content in the fragment nsf file is compressed,so directly utilizing string search can not find...
View ArticleGeneral Discussion: Microsoft Surface RT
kevin_canada wrote: Hello All, I stumbled across this forum when I received a windows 8 tablet for analysis. While it is most definitely not the best solution we ended up powering on the device, and...
View Article