±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 35896
New Yesterday: 1 Visitors: 149

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

Search found 46 matches

Re: Question RE Outlook Email Attachments

Post Posted: Aug 10, 17 21:29

Good tip thanks, will pass that one along.

The scenario I was curious about was a provided PST and/or standalone MSG where you can not go back to the source system assuming there was no image taken ...
flytnx
Topic: Question RE Outlook Email Attachments
Replies: 12
Views: 7077
 

Re: Question RE Outlook Email Attachments

Post Posted: Aug 10, 17 21:27

Thanks for this!

[quote="gungora"]In my experience, when you remove attachments in that manner, the MSG file would not be compacted. So:

* The size of the MSG file would typically reflect the or ...
flytnx
Topic: Question RE Outlook Email Attachments
Replies: 12
Views: 7077
 

Re: Question RE Outlook Email Attachments

Post Posted: Aug 09, 17 20:46

Thanks Jim - I had tried testing that method on a sample PST I created with no luck, will go back to the drawing board.

I would assume if this were for a Discovery matter where .MSG files were prod ...
flytnx
Topic: Question RE Outlook Email Attachments
Replies: 12
Views: 7077
 

Re: Question RE Outlook Email Attachments

Post Posted: Aug 09, 17 20:21

[quote="jpickens"]If it's in an Exchange environment, and retention policies are in place, you can pull the origional from the mail server and compare.

Just because a change in Outlook happens, do ...
flytnx
Topic: Question RE Outlook Email Attachments
Replies: 12
Views: 7077
 

Question RE Outlook Email Attachments

Post Posted: Aug 08, 17 22:49

Hi All,

I wanted to bounce something off everyone to see if you have ever encountered this or know of a way which this can be detected.

Specific to Outlook 2016 (However, I recall you can do thi ...
flytnx
Topic: Question RE Outlook Email Attachments
Replies: 12
Views: 7077
 

Re: Finding artifacts from cloud storage programs

Post Posted: Nov 17, 15 04:28

[quote="keydet89"][quote="iamgenius"]With cloud computing, you can commit a crime and there will be no data in your local machine an investigator can use as an evidence against you. [/quote]

Really ...
flytnx
Topic: Finding artifacts from cloud storage programs
Replies: 14
Views: 7890
 

Re: Documentation for internal reviews

Post Posted: Nov 17, 15 04:21

Aside from the basics IE. Chain of Custody, device related information for which you have collected ETC. I would suggest taking extensive notes. Regardless of the fact that the device may stay within ...
flytnx
Topic: Documentation for internal reviews
Replies: 3
Views: 2721
 
Page 1 of 7
Page 1, 2, 3, 4, 5, 6, 7  Next