Mobile Phone Forensics: wrong number displayed on received message
Please accept my apologies for a long post.... I received a text from a number +44765XXX etc the number displayed on my screen and no name The message was from a mate of mine, I presumed he must have a...
View ArticleGeneral Discussion: Linux Encrypted Partition(s)
I've actually answered my own question. For anyone else who comes across this, in my case the MBR boot record partition entries were 0'd out. I basically forged an MFT record for the partition on the...
View ArticleForensic Hardware: Best mobile forensic package for a small department budget
Check with other local law enforcement and see what they're using. Then buy something else. Seriously, on a small department budget what you should probably do is work out an arrangement with other...
View ArticleForensic Hardware: Opal drives
Has anyone had experience of examining opal drives? Are there any dos and don'ts? Are there any not possibles? I have Googled and searched SciVerse and IEEE XPlore.
View ArticleGeneral Discussion: Determine active user accounts on SBS 2003
Daniel, Thanks for that...and please do not misunderstand, as I am not trying to suggest that you are wrong or incorrect in some way. Adam had asked/stated: "I'm working on a MS Small Business Server...
View ArticleGeneral Discussion: Likely locations for passwords?
tpeoples wrote: However, I think this file was created with 7-zip and I'm wondering if that may have something to do with why its not working. Are 7z's a different extension than .zip? Are the...
View ArticleMobile Phone Forensics: Odd Date/Time shown on Blackberry 9900 when powered up
Might these be of help to you: A blackberry user complaining about clock being 24-hrs ahead of real time: blackberryforum wrote: ..when I click on the "wrench" for Options, then click on Date/Time, it...
View ArticleForensic Software: Recovering H.264 video files with Defraser 1.3.0 for free ?
If you have roughly the same number of ftyp, moov and mdat tags on a disk, it is likely that they are encapsulated. ftyp are normally only 0x14 to 0x24 bytes long moov atoms have a structure that will...
View ArticleGeneral Discussion: Translating Windows7 Registry Data Name/Value
keydet89 wrote: You'd be surprised at what someone with some knowledge and experience can do with that system.... or even a much less recent/powerful one <img src="images/smiles/icon_wink.gif"...
View ArticleGeneral Discussion: OST Files Unrecoverable
It worked! I'll purchase the software in order to save the file to PST format - your help is invaluable!! Thanks!!!
View ArticleGeneral Discussion: Detection of Forged Documents
As you have quoted the Video Spectral Comparator-6000 of Foster & Freeman other equipments are- Forensic XP-4010D of ScienceGL, Inc. Docucenter-NIRVIS of Projectina Ltd. now acquired by makers of...
View ArticleMobile Phone Forensics: Nokia 206
Thought I would share a method I have just found after 3 days of trial an error and tearing the vast majority of my hair out. If you buy the USB JTAG for this device, you can acquire it via USB using...
View ArticleEmployment and Career Issues: Career/Job of computer forensics in Australia
Hi, I might be a little out of touch, having relocated from Melbourne to London about 4 years ago...but my two cents. Adam's advice is really good, I know that some of those second tier companies...
View ArticleGeneral Discussion: Determine active user accounts on SBS 2003
Adam, So you parsed the NTDS.DIT file for the password?
View ArticleForensic Software: Speed tests and image size results
Speed tests and image size results when creating forensic images for many programs/suites. goo.gl/nEX1I
View ArticleEducation and Training: Certified Cyber Forensics Professional (CCFP) ISC2
Does anyone plan on taking this exam? September will be the month of release. Also what do you think of the topic coverage (download from site). Do you think this being from ISC2 will make it more...
View ArticleMobile Phone Forensics: iPhone 5 Code Question
Do you have an associated computer also? Could use the escrow key bag if so. See this thread from last week: http://www.forensicfocus.com/Forums/viewtopic/t=10775/ Colin
View ArticleEmployment and Career Issues: Career/Job of computer forensics in Australia
Just sent you a PM re UK relocation
View ArticleGeneral Discussion: Forensics in the Martin/Zimmerman case
Slight discrepancy? That sounds a little more than slight. I think the prosecutors need to be held accountable if they did withhold evidence from the defense.
View Article