Part 2, of the series. Part 1, of how to import hashes into EnCase is available here.… more →
Where is Your Data?rjbiii wrote 3 days ago: From two different blogs, we read of a fascinating criminal case involving a tug of war over evidenc … more →
thelporeport wrote 2 months ago: Wednesday news: W. Lawrence Wescott, in a lengthy but worthwhile read, tackles the issue of backup … more →
585 wrote 3 months ago: Part 2, of the series. Part 1, of how to import hashes into EnCase is available here. … more →
585 wrote 3 months ago: Forensics: Importing Hashsets into EnCase (Part 1) … more →
thelporeport wrote 3 months ago: Let’s get into some e-discovery news for a Friday. A lot of discovery software providers are … more →
585 wrote 3 months ago: Guidance Software, the forensics giant which produces EnCase has announced the release of its e-disc … more →
585 wrote 3 months ago: What’s the big deal about hashes? This article follows on from the previous myths about “verificatio … more →
585 wrote 5 months ago: Historically computer forensics has always been lead by law enforcement. The technology, the methods … more →
585 wrote 5 months ago: A new computer forensics quiz FAT has been released. This quiz, as with the others, is designed to … more →
585 wrote 5 months ago: A new computer forensics quiz has been released, this one is based on disks and disk geometry. The … more →
585 wrote 5 months ago: A new computer forensics quiz has been released, this one is based on hardware. The questions are d … more →
585 wrote 5 months ago: Encase is without doubt the most popular forensics tool on the market, however due to the name of on … more →
585 wrote 5 months ago: What does “imaging” a hard drive mean? Imaging is the process of taking an exact copy of … more →
tech2ullc wrote 6 months ago: We have included FTK Imager on our boot CD/USB drive. After booting into the PointSec Admin page we … more →
Paul Bobby wrote 6 months ago: I have added a ‘page’ to my blog entitled “My Files”. This page will track t … more →
585 wrote 6 months ago: The video below shows how to image a hard drive using EnCase. … more →
585 wrote 6 months ago: What does “File Extent” mean in EnCase? The term “File Extent” in EnCase is … more →
585 wrote 6 months ago: What is the MFT Mirror? The MFT Mirror, seen as $MFTMirror in computer forensics tools, is a partial … more →
585 wrote 6 months ago: EnCase ,one of the most popular forensic tools, can display a variety of dates, including created, w … more →