±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 31952
New Yesterday: 1 Visitors: 122

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

RSS Feed Widget

±Latest Webinars

Search found 3526 matches

Re: Sophisticated Call Spoofing case

Post Posted: Sat Mar 25, 2017 11:19 am

Sophisticated? Question

jaclaz
jaclaz
Topic: Sophisticated Call Spoofing case
Replies: 2
Views: 80
 

Re: $MFT Resident data

Post Posted: Sat Mar 25, 2017 9:18 am

Only to keep things as together as possible, just tested 4096 bytes sector see here:
https://www.forensicfocus.com/Forums/viewtopic/p=6587693/#6587693

[quote]
.... I quickly made one and tested ...
jaclaz
Topic: $MFT Resident data
Replies: 17
Views: 12124
 

Re: delete file in safe way ?

Post Posted: Sat Mar 25, 2017 9:13 am

[quote="benfindlay"]

I've taken a quick look over the at sample posted in the link you provided and the following observations jumped straight out at me:
...
[/quote]
Good.
I happened to rememb ...
jaclaz
Topic: delete file in safe way ?
Replies: 12
Views: 1601
 

Re: delete file in safe way ?

Post Posted: Thu Mar 23, 2017 1:46 pm

[quote="mscotgrove"]

Don't forget that very small files, maybe a few 100 bytes long, can be stored in the $MFT[/quote]
For the "standard" 512 bytes/sector (and conversely 1024 bytes/entry) the lim ...
jaclaz
Topic: delete file in safe way ?
Replies: 12
Views: 1601
 

Re: Amateur (IT Department) Investigators

Post Posted: Tue Mar 21, 2017 2:27 pm

All in all it seems to me (when talking of PC's) most of the (irreversible) issues come from a not-fully-compliant method to image the original disk or failure to image it.

So to solve a large part ...
jaclaz
Topic: Amateur (IT Department) Investigators
Replies: 12
Views: 1054
 

Re: Amateur (IT Department) Investigators

Post Posted: Tue Mar 21, 2017 9:51 am

[quote="tracedf"]
Strong opinions? Yeah. But, I'm interested in hearing experiences that are good, bad, neutral, strange, whatever.[/quote]
Good Smile , I posted because it seemed to me like you wer ...
jaclaz
Topic: Amateur (IT Department) Investigators
Replies: 12
Views: 1054
 

Re: Amateur (IT Department) Investigators

Post Posted: Tue Mar 21, 2017 9:38 am

Do we have to assume that [u]all[/u] IT personnel, particularly those tasked with internal investigations, are untrained and will download and run whatever their Google search recommends (and do we al ...
jaclaz
Topic: Amateur (IT Department) Investigators
Replies: 12
Views: 1054
 
Page 1 of 504
Go to page 1, 2, 3 ... 502, 503, 504  Next