Mobile Phone Forensics: Phone with Android - bluetooth question
Well... Kind of reviving an old post here, but wondering if anyone can clarify. I am trying to find information for Bluetooth paired devices. I am more interested in audio headsets rather than transfer...
View ArticleGeneral Discussion: Cellular Forensic Worksheet
I don’t have a spreadsheet for you, but I did design an entire app around handling the type of notes you’re trying to take and maintain: Monolith Pro - www.monolithforensics.com
View ArticleGeneral Discussion: Cellular Forensic Worksheet
It sounds like you are on the right track. Depending on where you work, you should include the contact person for the case along with their contact information, the search warrant/court order number...
View ArticleMobile Phone Forensics: Mobilyze 2018 - Android issue
Have you looked at the troubleshooting tips on BlackBag's page? https://www.blackbagtech.com/resources-android-resources/ In particular, have you tried the USB modes other than MTP?
View ArticleGeneral Discussion: SHC entries from User Hives
Anyone knows what's the SHC entries used for? In what scenarios will the Operating System creates an entry in Software\Microsoft\Windows\CurrentVersion\UFH\SHC? I tested on my own machine and it seems...
View ArticleMobile Phone Forensics: Decryption of WhatsApp db by importing into older...
Hello, I received an iPhone Xs and recovered the the data including WhatsApp. One month later the same phone set is returned with WhatsApp removed. I can see the WhatsApp enc files in a folder. There...
View ArticleGeneral Discussion: Cellular Forensic Worksheet
Please send me a PM with your email address and I will send you our template Evidence Map Excel spreadsheet. Our Evidence Map contains multiple tabs for recording all critical case information:...
View ArticleGeneral Discussion: What images were uploaded to the Internet via a Mac?
It sounds like you're asking if Mac OS stores a centralized upload history and the answer is no.
View ArticleGeneral Discussion: What Can Happen if Write Block is Not Enabled?
tracedf wrote: Without write-block, you are going to make some changes to the drive/device. But, it's not always possible to avoid making any changes. The goal should be to avoid making changes to the...
View ArticleGeneral Discussion: What Can Happen if Write Block is Not Enabled?
The question "How critical is Write-Block during onsite triage?" needs qualifiers to answer accurately. Every scenario is independent from another. What is 'critical' in one scenario may not be in...
View ArticleGeneral Discussion: Mac OS Remote Forensic Collection
Hi, EnCase Forensic / Endpoint Investigator version 20.2 contains the agent which allows for preview/collection of a Mac running macOS 10.15 Catalina and with the T2 security chip over the network -...
View ArticleGeneral Discussion: Remote Imaging Macs Running Catalina and T2 Chip
Hi Not sure if you found a solution however EnCase Forensic / Endpoint Investigator version 20.2 now contains the agent which allows for preview/collection of a Mac running macOS10.15 Catalina and with...
View ArticleForensic Software: Sans sift workstation install
I am attempting to install Sans Sift Workstation on Ubuntu 16.04. I get the the key verification part and it gives me a file open error. Please see error below. I am welcome to suggestions!! I'm out of...
View ArticleForensic Software: Sans sift workstation install
Thank you AmNe5iA! That was exactly what it was, thank you for you're help!! Have a good day.
View ArticleGeneral Discussion: Mac OS Remote Forensic Collection
randomaccess wrote: Velociraptor is a free collection utility. You can create a server on aws or your local network and deploy the agents to collect/hunt/monitor We use the Windows version a lot, but...
View ArticleGeneral Discussion: How to recover a hacked Instagram account?
sovietpecker wrote: The only way to recover a hacked account is to contact the customer care and provide as much information as possible that would tie the true owner to the account. Every account is...
View ArticleGeneral Discussion: Budding Forensic Scientist here.
I was wondering if anyone could help me. I have my work experience coming up soon for secondary school (Year 10) and was wondering where I could go to further my knowledge on Forensic Science. Thanks,...
View ArticleGeneral Discussion: Data Recovery from EMC Isilon cluster
data stored on a cluster comprised of 14 different devices containing over 500 individual HDDs data is encrypted in motion and encrypted at rest this sound more like recovery from a data center than a...
View ArticleForensic Software: Conducting an email review using free/low cost software
DISCLAIMER: I have no professional association with Passmark, maker of OSForensics. In my opinion OSForensics is the most cost effective tool to use to review, analyze, tag and produce email files...
View Article