Forensic Software: Implementing a mobile forensic lab
Atm there is not much that can be done with windows phone 7/8 due to limitations and security in the OS (locked down). Media files are supported by XRY and media files/contacts by UFED. We have to...
View ArticleMobile Phone Forensics: Blackberry chipoff
if you want to pm me I will tell you why I always use them
View ArticleGeneral Discussion: Can I Make Forensic-Format Copy of Single File or Folder?
Thanks for the information. Ken
View ArticleGeneral Discussion: IEF 5.7 ? Patent Pending ?
Patenting software has little to do with novelty (or usefulness). It mostly has to do with implied legal threat.
View ArticleGeneral Discussion: Encase 6.8 Date off 47 Days
I am involved as the defendant in a court case where the local TI did an image of my computer using Encase 6.8 and concluded that I had done three google searches of the insurance investigator 23 days...
View ArticleGeneral Discussion: Hope this hasn't been asked already....ENCRYPTED VOLUMES
There are a lot of presumptions in this method, but an other way to approach this is eliminate all known and signature matched files at cluster level. What remains most likely will contain your...
View ArticleGeneral Discussion: Facebook Private Messages
Thank you all for you help, this has given lots of information. I can now go back to the client and explain in more details what I had previously said about the Private Chat on Facebook. The member has...
View ArticleMobile Phone Forensics: .aud files wechat and whatsapp
PM Sent. Happy to test the product and give feedback. Thanks so much Colin
View ArticleDigital Forensics Job Vacancies: Digital Forensics - Dispute Consulting...
http://careers.duffandphelps.jobs/new-york/dispute/jobid4038107-dispute-consulting-director-jobs Digital Forensics - Dispute Consulting Director (NYC) Please see below for the following position: Job...
View ArticleGeneral Discussion: acquisition speed test with FTK Imager
Caseload permitting I understand I think being from sleepy Perth my idea of a heavy caseload probably differs somewhat from other parts of the world.
View ArticleMobile Phone Forensics: MS Windows Phone 8
Is any way to acquire the content (phonebook, messages, etc.) of the Windows Phone 8 mobile? Thanx for any help
View ArticleEducation and Training: A&M ‘Mastering Macintosh Forensics’ Course : London :...
We are pleased to announce that the Alvarez and Marsal ‘Mastering Macintosh Forensics’ course will be held in London from October 21 – 25. This is the inaugural European training event, so it’s a great...
View ArticleGeneral Discussion: Encase 6.8 Date off 47 Days
Athulin hit the nail on the head. For an investigator to not use a secondary tool to verify times and dates is quite irregular and any evidence prepared to report level would normally be checked with a...
View ArticleForensic Software: Implementing a mobile forensic lab
I appreciate all of the replies. Judging by the feedback from this site and on research I've previously conducted I think I'll start with one of the big 2 (most probably Cellebrite based on the...
View ArticleMobile Phone Forensics: MS Windows Phone 8
trewmte wrote: Did you do this search at HTC? http://search.htc.com/us/?q=HTC+Sync+Manager+windows+8&btn=Search&category=support That's not a very useful search string, is it? Ricco: As far as...
View ArticleGeneral Discussion: Windows Task scheduler artefacts
You never mentioned the version of Windows you were analyzing, and that may have an effect on what you find, and what may be possible... If you assume that these AT jobs were the result of someone...
View ArticleGeneral Discussion: Encase 6.8 Date off 47 Days
The following is just a possible guess as to why these dates may have been used. Please do not take this information as being the definitive answer or any form of legal advice as without the full...
View ArticleGeneral Discussion: Interview with jaclaz
Jamie - thanks for the interview, it is nice to put a face (almost) behind a name
View ArticleMobile Phone Forensics: Smartwatch analysis
A bit more info on several of the new (and not so new) smartwatches capabilities and functionality. http://omatetruesmart.wikispaces.com/Other
View Article