±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 36561
New Yesterday: 0 Visitors: 163

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

Search found 75 matches

Re: EnCase 8 and generating a file attributes report

Post Posted: Feb 11, 20 20:47

Hi,

If you select the entries of interest you should be able you export file details using the application menu (aka hamburger) on the side of the table.

From there you can create an export (TSV ...
hommy0
Topic: EnCase 8 and generating a file attributes report
Replies: 2
Views: 350
 

Re: apple macBook ip address

Post Posted: Feb 04, 20 08:22

Hi,

Try the following: /private/var/db/dhcpclient/leases

Regards
hommy0
Topic: apple macBook ip address
Replies: 3
Views: 667
 

Re: WebCacheV01.dat - opened files with Windows Explorer?

Post Posted: Jan 17, 20 09:40

Hi

To re-iterate other posters, I would test this for yourself with the options you mention (File Explorer double click and right click Open With)

A tool such as ESEDatabaseViewer from Nirsoft ...
hommy0
Topic: WebCacheV01.dat - opened files with Windows Explorer?
Replies: 5
Views: 1802
 

Re: AD Enterprise versus Endpoint Investigator

Post Posted: Jan 17, 20 09:03

Hi,

Can you confirm what you mean by [i]"Endpoint Investigator (and won't support macOS Catalina 10.15)"[/I]

If you are talking about Agent deployment and running on the Mac endpoint for remote ...
hommy0
Topic: AD Enterprise versus Endpoint Investigator
Replies: 5
Views: 1630
 

Re: imaging using encase, FTK and X-ways

Post Posted: Dec 13, 19 10:57

There is only a Windows version of EnCase.
It is has the ability and functionality to parse multiple file systems (other than NTFS, FAT, ExFAT) including EXT2,3, and 4
If you have taken a DD image y ...
hommy0
Topic: imaging using encase, FTK and X-ways
Replies: 8
Views: 3040
 

Re: imaging using encase, FTK and X-ways

Post Posted: Dec 12, 19 11:19

EnCase has a few methods to acquire an evidence file of a live system:

1) EnCase Portable can be configured to acquire a physical device into an EX01 or an E01

2) In “Program Files\EnCase8” ...
hommy0
Topic: imaging using encase, FTK and X-ways
Replies: 8
Views: 3040
 

Re: Tool for browser forensic investigation

Post Posted: Dec 03, 19 13:28

Do you have access to any other forensic tools such as EnCase or FTK? Both of these will include the ability to parse internet browser related artifacts.
Alternatives, could be
1) Net Analysis by ...
hommy0
Topic: Tool for browser forensic investigation
Replies: 7
Views: 2862
 
Page 1 of 11
Page 1, 2, 3 ... 9, 10, 11  Next