General Discussion: Jonathan Zdziarski : Waterboard
Would somebody be kind enough provide a mirror of the tool. I'm very keen to give the software a try. Thanks
View ArticleGeneral Discussion: Interview with Jim Grady, President, Cellebrite USA
Jim mentions the partnership with NUIX which is commendable, great to see software vendors cooperating. I'd also point out that the UFED dumps can be ingested by Intella as well
View ArticleGeneral Discussion: com.microsoft.office.plist - help with "Access Date"
Aaaahhh - tremendous. I've checked it against the plist in question and in fact the dates I come up with correlate with the metadata of the file itself. Huge thanks, Miss! You've relieved me of a huge...
View ArticleGeneral Discussion: com.microsoft.office.plist - help with "Access Date"
MissMari wrote: Ah yes, "decode", the french version of DCode <img src="images/smiles/icon_wink.gif" alt="Wink" title="Wink" /> http://www.digital-detective.co.uk/freetools/decode.asp I used...
View ArticleForensic Software: Calling & Call one enscrip from another.Should be easy?!?
If you mean programatically mimicking double-clicking on the other scripts to make them run on the loaded evidence, then NO, its not possible. There is a ProgramClass that allows you to compile and...
View ArticleGeneral Discussion: Exporting a word list in EnCase
In EnCase 7, if you have indexed your case: From the tools menu, select Passware Export. The Passware Export will generate a series of items, this will include a text file containing words from the index.
View ArticleGeneral Discussion: Which tools can examine the history of PC running programs
To be a examiner of digital evidence,I want to know which tools/software can list the log of the pc running programs recently.and the history of viewed website else. Is there anyone knows? Thanks!
View ArticleForensic Software: JAD IEF vs Belkasoft, opinions?
Belkasoft wrote: This statement is not completely correct. Evidence Center was the result of more than 2 years of work on previous product, Belkasoft Forensic Studio, which has been on the market for...
View ArticleGeneral Discussion: Remote Forensics
jaclaz wrote: With some attention they are not particularly an issue, JFYI (cannot say how much suited to "remote" and to your particular *needs*), check my "poor man's way"<img...
View ArticleGeneral Discussion: Totally erasing pc before reinstalling Op.System?
TonyC wrote: jaclaz, Yes, really. The KB Article I reference documents it for Vista. I discovered it as a result of some testing I did on Vista (when Vista was the current version of Windows). Some...
View ArticleForensic Software: JAD IEF vs Belkasoft, opinions?
mitch wrote: This is an interesting topic for me, last week I had a small evidence E01. I was quite amazed at the results using different applications. This enforced the understanding as a practitioner...
View ArticleGeneral Discussion: Totally erasing pc before reinstalling Op.System?
jaclaz, My bad! I reread this thread and DID see your mention of Vista and Win 7 long format. I guess I need to read slower or get better glasses. TonyC
View ArticleMobile Phone Forensics: MPs warn of chaotic forensic landscape
jhup wrote: Yes - and this is a perfect example how something that is of little value will be proofed in the flames of courts.Sure <img src="images/smiles/icon_smile.gif" alt="Smile" title="Smile"...
View ArticleClassifieds: X-Ways dongle, Tableau TD-1, 5 1TB WD Caviar Black HDs
Anything still available?
View ArticleGeneral Discussion: Alternate Data Streams
shakes wrote: Is there an offset in any of the attribute headers, attributes, or MFT header that tells you if a file as an ADS? You want the $DATA attribute(s) in the $MFT record. The nameless $DATA is...
View ArticleClassifieds: X-Ways dongle, Tableau TD-1, 5 1TB WD Caviar Black HDs
Quote:: Anything still available? Ditto
View ArticleForensic Hardware: Memory card SD/MMC write blocker
We use Digital Intelligence's UltraBlock Forensic Card Readers because they came with our FRED's. If you purchase them alone HERE, they're $80. While I was pulling up how much they cost, I stumbled...
View ArticleClassifieds: HardCopy 3P for sell
Yes it is. Sorry I didn't see your post earlier http://cgi.ebay.com/ws/eBayISAPI.dll?ViewItem&item=221263383252
View ArticleClassifieds: EnCase dongles for sale
I'm back! Having found the keys in the back of a drawer I'm quite keen to put them to use! The company that the keys are registered to has been wound up and disappeared. There's now no way to move the...
View Article