±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 35503
New Yesterday: 0 Visitors: 91

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Webinars

Search found 32 matches

Way to tell what program or process accessed a file?

Post Posted: May 24, 13 22:58

Is there any way in Windows to determine what program or process last accessed a file?

If I have a file that I can see was accessed during the time a machine was compromised, can I tell if it was ...
vrocco
Topic: Way to tell what program or process accessed a file?
Replies: 5
Views: 4603
 

Re: Data Recovery Lab

Post Posted: Jan 05, 13 05:16

I agree with all the previous posts about having knowledge and experience before starting a data recovery lab. However, speaking just to the equipment purchase part of the question, if I were starting ...
vrocco
Topic: Data Recovery Lab
Replies: 24
Views: 22829
 

Re: Hard drive Logic board issue

Post Posted: May 25, 11 19:14

Have you tried a device that does not use bios methods to recognize the drive such as a DeepSpar Disk Imager?

It sounds like possible SA corruption or maybe bad heads so SA can't be read. You said ...
vrocco
Topic: Hard drive Logic board issue
Replies: 6
Views: 6978
 

Re: Jonathan Zdziarski iPhone Tools [Discussion]

Post Posted: Apr 26, 11 01:52

Can someone familiar with these tools give me some guidance? I am trying to using the boot-passcode tool to remove the sim card lock and let me in to the phone. This is a data recovery case, not foren ...
vrocco
Topic: Jonathan Zdziarski iPhone Tools [Discussion]
Replies: 31
Views: 43706
 

Re: Drive just wont image, help?

Post Posted: Dec 06, 10 04:05

Just re-read the OP and realized you are trying to image through USB. You may have far better results using the native interface of the drive instead (IDE or SATA).
vrocco
Topic: Drive just wont image, help?
Replies: 19
Views: 12975
 

Re: Drive just wont image, help?

Post Posted: Dec 05, 10 02:10

[quote="TuckerHST"]A few more suggestions.

1) Freeze the drive. Really. Stick it in the freezer for a few hours, then image it. While imaging, keep it cool with a freezer pack on top of it. I have ...
vrocco
Topic: Drive just wont image, help?
Replies: 19
Views: 12975
 

Re: Drive just wont image, help?

Post Posted: Dec 04, 10 22:18

Data recovery is also my primary line of business. If you have any contacts at a local data recovery shop, you may want to see if you can borrow a DeepSpar Imager (most any good DR shop will have at l ...
vrocco
Topic: Drive just wont image, help?
Replies: 19
Views: 12975
 
Page 1 of 5
Page 1, 2, 3, 4, 5  Next