Forensic Software: Calling & Call one enscrip from another.Should be easy?!?
Hi all, Im having a lot of trouble figuring out how to call one enscript from another. I thought it would be easy but I cant seem to find a good example in the documentation or class browser. DI need...
View ArticleGeneral Discussion: DST error in Time Stamps
writerkeith wrote: Can I correctly conclude that it is reasonable to consider that timestamps on some files between March 11, 2007 and April 2, 2007 could be off by one hour? Not on the grounds you...
View ArticleGeneral Discussion: Totally erasing pc before reinstalling Op.System?
c)Booting from live USB stivk with DBAN and wipinng whole disk, and then install Windows, would be accoring your 4 points lists of differents manners of wiping a HDD, which of them would match to?
View ArticleGeneral Discussion: Sections of Unallocated Space Filled with 0xFF
i havent verified this with the latest dban, but based on this: http://sourceforge.net/p/dban/feature-requests/78/ it looks like this was at one time a requested option. dban would allow for wiping...
View ArticleGeneral Discussion: Examining VDI files
You can also mount it with FTK Imager, that is able to mount it both as a physical disk and as logical volumes (if Windows supports the file systems installed on the various partitions). After that,...
View ArticleForensic Software: GMail Header Information / IP Locations
As stated above, Gmail (and contrary to most other mailservers) does not include the origin IP address in its header. Which, for some people, is very useful.... A good tool for email header analysis...
View ArticleMobile Phone Forensics: Android security queries - writeblocking queries
I am working on a project involving a freeware write-blocking tool. The focus of this query in Android platforms. Hoping you can help. Excuse me in advance if my questions seem simplistic. 1. Is there...
View ArticleMobile Phone Forensics: Burner - Disposable Phone Numbers (Android/iOS) App
Yeah it removes the db. If it was an older iPhone I could have taken a physical image of it and given it a go but not on a 5. What I would love to play with is Epilog to see if that could have...
View ArticleGeneral Discussion: Totally erasing pc before reinstalling Op.System?
I missed again the main point of '2' : I was referring again to an external device(I have one to sell or give to a charity organisation).
View ArticleGeneral Discussion: Macintosh deleted files - are there any logs?
There are a large amount of .Plist files dotted around the Mac OS X that could be of help but it really determines exactly what kind of files you are looking for.
View ArticleDigital Forensics Job Vacancies: Principal Engineer – Digital Forensics
Basis Technology has a principal software engineering opening in our digital forensics group in Cambridge, MA. In this position, you will be a principal software engineer on our open source Java-based...
View ArticleDigital Forensics Job Vacancies: Software Engineer (Cambridge, MA)
Basis Technology has a mid-level software engineering opening in our digital forensics group in Cambridge, MA. In this position, you will join a team working on our open source Java-based platform and...
View ArticleDigital Forensics Job Vacancies: Digital Forensics Engineers (Reston, VA)
Are you curious about how mobile devices work? Are you interested in developing software that analyzes and recovers data from hard drives and mobile devices? Basis Technology is looking for several...
View ArticleGeneral Discussion: Macintosh deleted files - are there any logs?
Deleted Word documents are of most interest.
View ArticleGeneral Discussion: Google Map Tile Co-Ordinates
Hi all, Hoping someone can help.. I am currently working on a Mac Book Pro investigation and during the Internet History Analysis a series of Google Map Tile Co-ords were listed. Does anyone have any...
View ArticleGeneral Discussion: Totally erasing pc before reinstalling Op.System?
mitch wrote: But also factor in the time.... 00 a 1TB or 3TB hard drive...And not only time, factor in "stress". Talking of software solutions, let's say a plain dd, a fastish SATA 3 may allow (if you...
View ArticleForensic Software: GMail Header Information / IP Locations
Hi 4Rensics, Here is a keyword you can use to find a Gmail artifact containing the user's public IP address: ["la", (just those 6 characters, Unicode checked if using Encase, case sensitive) If you can...
View ArticleGeneral Discussion: Sections of Unallocated Space Filled with 0xFF
This may depend on the settings for pagefile (hyberfil size should only be affected by RAM amount). The default setting on Windows NT based systems is something like "Let system manage the pagefile"....
View Article