General Discussion: HEX SEARCH
athulin wrote: You probably can't -- at least not easily. Ordinary search tools (you haven't said what tools you *are* using), tend to have been designed for more limited jobs, and often have a limit...
View ArticleMobile Phone Forensics: Forensics Android App
Why not create an app that can be launch from the SD card? Or if possible boot from the SD card? Would it work without altering the data?
View ArticleForensic Hardware: USB 3.0 to SATA II/III Write Blocker
That would work, however, I am looking for something where I can plug in a USB 3.0 thumb drive. So I guess I am actually looking for a female USB slot and a male SATA.
View ArticleMobile Phone Forensics: Forensics Android App
jhup wrote: JWasley wrote: Hi all, I've just created a survey to note down some statistics on my report. Any forensic examiner with a minute to spare, i'd be grateful! http://tinyurl.com/d9rdxs9 Q3 -...
View ArticleGeneral Discussion: Volume Shadow Copies
DecipherTrent wrote: BitHead wrote: Ah, thank you, that is much more clear. How large are the VSCs? and what version of Imager are you using? They seem to range between 13 and 20 gigs each. I am using...
View ArticleEducation and Training: Requirements Elicitation on Bittorrent Clients
ImraanP wrote: What locations would the artefacts be created when downloading files using a torrent in uTorrent? That's one of the basic questions a FE would like to have answered, yes. It's a question...
View ArticleGeneral Discussion: Recover deleted data from backup tapes?
We can recover accidentally deleted data from the recover tapes. Files that have been modified or updated during last 24 hrs are stored recover backup tapes. Weekly modified information is also stored...
View ArticleMobile Phone Forensics: SaraSoft Nokia 101
I have recently received a Twister Flasher Box, with its SaraSoft software, i have never used any flasher boxes before. however i think flasher boxes are used to flash updates and upgrades to phones or...
View ArticleGeneral Discussion: Quarter of a Million
This year, indeed this month, I reached 25 years in dealing with mobile phone evidence and forensics and, for me, I am please to see a quarter of a million viewers to my trewmte.blogspot that only...
View ArticleGeneral Discussion: Excel modification
It would be very helpful to know in which version of Excel the spreadsheet was created. Is it .xls or .xlsx? The two file formats contain very different data, although you can get a good deal of data...
View ArticleMobile Phone Forensics: SaraSoft Nokia 101
You can use a twisterbox cable in combination with XRY or UFED, I don't have experience with sarasoft. I assume it is an twister bix cable with a RJ45 connector. Use the xry/ufed usb to RJ45 cable and...
View ArticleGeneral Discussion: Windows and the BIOS clock
jaclaz wrote: Just for the record: http://blogs.msdn.com/b/oldnewthing/archive/2004/09/02/224672.aspx http://www.cl.cam.ac.uk/~mgk25/mswish/ut-rtc.html jaclaz That second link is very interesting reading.
View ArticleMobile Phone Forensics: Forensics Android App
Dear JWasley, I am a student and new into the field, but I have been thinking about it as my Masters thesis that I will have to do in a year. If you think it is a good idea, could you please let me...
View ArticleGeneral Discussion: CF Degrees, too specific?
keydet89 wrote: communicate via 10Base2...I walked him by the digital lab and picked up two T-connectors and two terminators, and had the two systems communicating in a matter of seconds. Agreed, being...
View ArticleMobile Phone Forensics: SaraSoft Nokia 101
If I remember correctly the SaraSoft software while supporting a number of Nokia handset's is currently not able to do anything with the model you have listed. The model exists in the software but I...
View ArticleMobile Phone Forensics: Mobile forensics TIPS [Knowledge Sharing]
It may make sense to double check each of your findings already also. I mention that as you have said that Series 40 Nokia's only keep logs for 30 days. The 6230 is a Series 40 handset and it keeps it...
View ArticleGeneral Discussion: Windows and the BIOS clock
Geesh... Make me feel so old. I do remember, we could buy an expansion card with RTC. jaclaz wrote: I guess you are too young to remember the early (and good ol'<img...
View ArticleGeneral Discussion: Quarter of a Million
Congratulations Greg on running an excellent resource for forensic science!
View ArticleEducation and Training: Accessdata all access pass
About $4,496.22... +/- a few hundred.
View Article