±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 35896
New Yesterday: 1 Visitors: 120

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

Search found 21 matches

Windows 7 Event Log Help

Post Posted: Mar 02, 15 07:01

I am looking at the Microsoft-Windows-Application-Experience%4Program-Inventory event log from a Windows 7 system. Normally this log would contain EventID codes of 900, 901, 903, 904, 905, 906, 907, a ...
Matrix
Topic: Windows 7 Event Log Help
Replies: 7
Views: 7965
 

Re: Exchange 2010 Rule-based Forwarded Email

Post Posted: Sep 11, 14 21:12

Thank you for the reply. You are correct when you say understanding how the email was sent would be helpful. That is exactly what I am trying to figure out.

I know that the user's logon account had ...
Matrix
Topic: Exchange 2010 Rule-based Forwarded Email
Replies: 2
Views: 6870
 

Exchange 2010 Rule-based Forwarded Email

Post Posted: Sep 10, 14 19:40

Hello Everyone,

I am working on a case where an ex-employee (the Exchange Admin) received some confidential emails after they had left their employer. I have checked the Exchange Message Tracking l ...
Matrix
Topic: Exchange 2010 Rule-based Forwarded Email
Replies: 2
Views: 6870
 

Re: harddisk serial number

Post Posted: Mar 20, 14 19:25

You could check the SusClientIDValidation registry entry found in the Software\Microsoft\Windows\CurrentVersion\WindowsUpdate registry. The hard drive number is stored in Hex and will need to be conve ...
Matrix
Topic: harddisk serial number
Replies: 3
Views: 6720
 

Re: Internet History - weapon of choice?

Post Posted: Feb 20, 14 07:56

I use both NetAnalysis/HstEx and IEF to extract Internet history. The extracted records are imported into MS Access and I run custom SQL query scripts to identify relevant evidence.
Matrix
Topic: Internet History - weapon of choice?
Replies: 10
Views: 8647
 

Re: Detecting Digital Image Modifications

Post Posted: Mar 16, 09 21:08

Thanks Jaclaz. The Error level analyser looks promising.
The info on the HackerFactor site is great! Thanks.
Matrix
Topic: Detecting Digital Image Modifications
Replies: 22
Views: 18232
 

Re: Detecting Digital Image Modifications

Post Posted: Mar 16, 09 18:46

JPEGSnoop is one of the first programs I used. I ran it against several known images and it reported the ones that I knew to be modified. Unfortunately, it didn't indicate where on the image the chang ...
Matrix
Topic: Detecting Digital Image Modifications
Replies: 22
Views: 18232
 
Page 1 of 3
Page 1, 2, 3  Next