Search results
Challenges and Images. Additions to this list are encouraged and may be sent through our contact form. Test Images. Computer Forensic Reference Data Sets (CFReDS) www.cfreds.nist.gov. The CFReDS site is a repository of reference sets/images of simulated digital evidence for examination. Some images are produced by NIST, often from the CFTT ...
Sep 18, 2018 · Target Document for Word Forensic Analysis. Our target Word document is a document created on 8/30/2018 8:19 PM (PDT) using Word 2007 on a computer running Windows 7 SP-1. It was saved as a DOC file by using the “Word 97-2003 Document” option in the file save dialog in Word. While installing Office 2007, the suspect had chosen “Chris Doe ...
Dec 3, 2020 · A Must-Read Primer On LevelDB. 3rd December 2020 by Forensic Focus. Over recent weeks, Alex Caithness, Principal Analyst at CCL Solutions, has been exploring the LevelDB database format. As ubiquitous as SQLite has become owing to the popularity of iOS and Android, he argues, “The trio of HTML5, CSS and JavaScript (and latterly, increasingly ...
Jul 24, 2017 · Fairly sure X-Ways processes OST files and, in a recent version (last 12 - 18 months), allowed handling of much large email files. Reply Quote Page 1 / 2 1 2 Next
Nov 2, 2018 · Contraband files such as copyrighted movies and music, child pornography and pirated content, are frequently acquired through the peer-to-peer (P2P) file sharing protocol BitTorrent. This research will include the digital forensic analysis of the μTorrent client, specifically, the free (Basic) version 3.5.3 for Windows released on utorrent.com.
Sep 12, 2022 · An Adobe Acrobat Plug-In for detailed analysis and COS level manipulation of PDF documents. It provides instant access to information about drawn objects (fonts, color spaces, page location, etc.) as well as a COS level tree view for analysis and manipulation of the internal object structure.
Oct 8, 2019 · If the user then accesses those files then the targets MAC times are copied into the link file (note, if you dont want to get caught dont access the files) A simple method is to extract all the shell items from LNK/Jumplists, filter for external media, look at all the files that were accessed where mod < create and then the create date is the when the file was copied
Nov 21, 2018 · Maybe someone will be interested in the free plugin for 7-zip, which allows you to open various forensic disk images as archives. Forensic7z is a plugin for the popular 7-Zip archiver. You can use Forensic7z to open and browse disk images created by specialized software for forensic analysis, such as Encase or FTK Imager.
May 6, 2005 · There was no INFO2 file showing the deletion date for the files but from analysing the System Restore Points in XP I am pretty sure that the files were deleted between two specifc dates. Analysing the file information in FTK, I can see that around 20% of the files have access dates that are different from the original creation dates.
Jul 24, 2011 · 24th July 2011 by Forensic Focus. by Frank McClain. A write-up about some forensic aspects of online storage/file-synching service Dropbox™. Cloud-based services are becoming more prevalent, and not just for businesses – end- and home-users are taking advantage of opportunities to automate backups, make files available offline or from any ...