±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 36595
New Yesterday: 4 Visitors: 119

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

Search found 132 matches

Re: CSITech - RAM Analysis Course

Post Posted: Apr 24, 14 20:41

Hi guys, I run the CSITech training Smile

The Volatility training is top notch and I would highly recommend it. However, the course I run is a little different as we look at a number of techniques and ...
nickfx
Topic: CSITech - RAM Analysis Course
Replies: 5
Views: 4968
 

Re: iPhone Video Metadata

Post Posted: Jun 06, 13 13:52

Based on the research I posted above, I've uploaded a tool written by @digininja to extract the useful metadata from iPhone video. Take a look.

http://www.csitech.co.uk/ivmeta-iphone-metadata/

...
nickfx
Topic: iPhone Video Metadata
Replies: 2
Views: 9012
 

Samsung F480 date/time

Post Posted: Jun 04, 13 01:56

Evening,

I'm investigating images originally taken by a Samsung SGH F480 phone. The model is clearly tagged in the metadata. However, the dates embedded in the metadata do not agree with the date ...
nickfx
Topic: Samsung F480 date/time
Replies: 3
Views: 3958
 

iPhone Video Metadata

Post Posted: May 30, 13 15:11

Hello,

I was asked by a law firm this week if it was possible to link a video taken by an iPhone back to the original device. Although this does not appear definitively possible, the research on t ...
nickfx
Topic: iPhone Video Metadata
Replies: 2
Views: 9012
 

Re: Case File Sizes

Post Posted: Apr 24, 13 18:29

[quote="LukeLuke"]Case size you mean the overall size of all the drives imaged?[/quote]

Yes bud
nickfx
Topic: Case File Sizes
Replies: 7
Views: 7806
 

Case File Sizes

Post Posted: Apr 23, 13 21:51

Having just finished a case of over 5 TB and started on the next one which is an 8Gig USB key (ridiculous to the sublime!), it got me thinking, what would you say is your average case size now?

I l ...
nickfx
Topic: Case File Sizes
Replies: 7
Views: 7806
 

Re: Recovery of a corrupt VMDK

Post Posted: Apr 03, 13 01:10

Hi thanks for the replies

1. Its a Sparse image - non-split. Its from an ESXi server. VMWare want $500 to help Smile

2. Data carving would be a last resort, the folder we need is a www folder th ...
nickfx
Topic: Recovery of a corrupt VMDK
Replies: 9
Views: 13842
 
Page 1 of 19
Page 1, 2, 3 ... 17, 18, 19  Next