General Discussion: Converting E01 to VMDK
Is caching enabled in the PDE? If it can't cache the writes to the mounted disk, VMWare will fail. What version of Live View are you using? I've had mixed luck with 0.7b and EnCase 7.06 but I have been...
View ArticleGeneral Discussion: Binary execution in appcompatcache only ?
cedricpernet wrote: ...not in other usual execution locations ? Which version of Windows, and what "other usual execution locations"?
View ArticleGeneral Discussion: Password Strength
Xennith wrote: Correcthorsebatterystaple type passwords are great against bruteforce but less wonderful against dictionary hybrid attacks with a rule along the lines of %w%w%w%w. This kind of...
View ArticleForensic Hardware: different bridge for each host drive interface, or adapters?
adiamond wrote: So, if I understand correctly, and I'm oversimplifying here a bit, assuming I want the general capabilities to capture 4 drives concurrently, I might purchase 4 write blockers (of the...
View ArticleMobile Phone Forensics: Faraday bags
I did, and they sell to non LE, it was an easy process. rjudy55 wrote: Hi Luke, We compet with a few other companies in this space, Disklabs and Paraben, so you can contact them to see how we stack up!...
View ArticleForensic Software: F-Response advice/help
Okay figured it out. When I first started up the License Manager component I didn't notice the drop down arrow next to the local IP address, I just accepted what ever was populated there. Upon closer...
View ArticleGeneral Discussion: OS X Thumbnail Database
You can use Scalpel to carve out thumbnailcache files.
View ArticleGeneral Discussion: Binary execution in appcompatcache only ?
I can't say that I've seen it, but also, I haven't really looked for it. I had one case a while back where I found a Prefetch file for "0.exe" and a reference to the file in the appcompatcache.pl...
View ArticleGeneral Discussion: Forensic Readiness Survey – Five $50 Gifts Available
As someone who has performed DFIR, both as a consultant as well as an internal FTE analyst, I'd like to offer some insight. Now, I know that you're in a different country, so my perspective will be...
View ArticleMobile Phone Forensics: Samsung F480 date/time
How far off is the date? It may be Samsung's internal calculation of the date.
View ArticleGeneral Discussion: Tom Tom Go Live 825
DickPeake wrote: Are we seriously saying that my TomTom Go Live 1005, which is packed full of information about where I have been, A to B itineraries that have been planned and sometimes deleted, what...
View ArticleGeneral Discussion: Password Strength
As a question, I have seen someone use a password along the lines of JohnSmithJohnSmithJohnSmith Easy to remember, but long. Is this secure?
View ArticleGeneral Discussion: Sort forum searches
in the search function there is an option in lower right to sort by whatever you want
View ArticleGeneral Discussion: Please recommend some famous forums about computer forensic
Hi there, hope these help. http://www.forensicfocus.com/ http://www.cert.org/forensics/ http://www.forensicswiki.org/wiki/Main_Page http://www.computerforensicsworld.com/...
View ArticleGeneral Discussion: Completely wiping drive leaves no evidence?
thanks Jaclaz, i'll look at the links you provided. pbobby wrote: Quote:: I then used wiping software to wipe the memory stick with 0's. I then ran recovery software again. And nothing Congrats - you...
View ArticleGeneral Discussion: Password Strength
I understand that using dictionary words make it seem less secure but using a complex leet'd random characters is also going to fall to a full hash lookup database or rainbow table, so why not employ a...
View ArticleDigital Forensics Job Vacancies: Incident Response and Forensics Consultant,...
Job title Incident Response and Forensics Consultant , London based, £55,000-90,000 plus benefits and bonus Summary A specialist technology security company are seeking consultants at the mid to senior...
View ArticleDigital Forensics Job Vacancies: Incident Response and Forensics Consultant ,...
Job title Incident Response and Forensics Consultant , UAE based, £65,000-100,000 plus benefits Summary A specialist technology security company are seeking consultants at the mid to senior level to...
View ArticleGeneral Discussion: Breaking Bitlocker Encryption
Have you tried to ask for the password/key?
View ArticleClassifieds: Looking for 1 or 2 Encase V6 dongles
Hi There, we are currently about to add to more headcounts. As we are currently using Encase V6 to process all our cases and we are not yet sure, if we gonna go the Encase V7 path, we are seeking out...
View Article