±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 36317
New Yesterday: 0 Visitors: 134

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

Search found 496 matches

Re: Extract $J

Post Posted: Dec 13, 19 20:49

[quote="joakims"]The tool is open source and not dangerous. It can do one thing and is good at it. To extract from a vsc you need the volume mounted so that the shadow is exposed through the OS symbol ...
UnallocatedClusters
Topic: Extract $J
Replies: 13
Views: 933
 

Re: Extract $J

Post Posted: Dec 12, 19 20:40

[quote="joakims"]I made a very simple tool to do just that. You can try it out; https://github.com/jschicht/ExtractUsnJrnl[/quote]

Chrome blocked the download the download from Github as "dangerous ...
UnallocatedClusters
Topic: Extract $J
Replies: 13
Views: 933
 

Re: Doctored PDF?

Post Posted: Dec 12, 19 20:02

STEP #1: Use OSForensics or equivalent to extract embedded text from the PDF files

STEP #2: Search for and tag both XML Stream metadata values designated by the <xap:MetadataFieldname>..... ...
UnallocatedClusters
Topic: Doctored PDF?
Replies: 1
Views: 359
 

Re: Extract a encrypted iTunes backup with password and wech

Post Posted: Dec 07, 19 04:01

You could try to restore the encrypted backup to a factory reset iPhone, “reset all passwords” under settings in the iPhone, and then acquire and analyze the iPhone data with whatever tools you ha ...
UnallocatedClusters
Topic: Extract a encrypted iTunes backup with password and wechat
Replies: 6
Views: 4993
 

Re: Potential Manipulation of Email Name

Post Posted: Nov 14, 19 20:37

Thank you - very helpful.

So basically one can input different "Display Names" on different email clients:

I could input "John Smith" as a display name using an Outlook client on one laptop an ...
UnallocatedClusters
Topic: Potential Manipulation of Email Name
Replies: 4
Views: 1368
 

Re: Samsung Star, Tocco Lite or Avila

Post Posted: Nov 12, 19 01:54

Here is a link to Samsung desktop software for the phone:

https://www.samsung.com/uk/support/model/GT-S5230BDAXEN/

Perhaps you could use the Samsung desktop software to make a backup of the phon ...
UnallocatedClusters
Topic: Samsung Star, Tocco Lite or Avila
Replies: 4
Views: 1100
 

Potential Manipulation of Email Name

Post Posted: Nov 11, 19 23:52

Opponents in a civil case I am working on have produced multiple emails with different "aliases" and are suspected of fraud:

James Smith <[email protected]>
JS <[email protected]>
JSmith &l ...
UnallocatedClusters
Topic: Potential Manipulation of Email Name
Replies: 4
Views: 1368
 
Page 1 of 71
Page 1, 2, 3 ... 69, 70, 71  Next