31
MAR
2017
As many well know, Apple and Microsoft products are not always easily compatible. We have discovered that some Apple emojis found on Mac OS X...
As many well know, Apple and Microsoft products are not always easily compatible. We have discovered that some Apple emojis found on Mac OS X...
Collecting and analyzing RAM on a Mac is, not surprisingly, different than it is on a Windows machine. Tools like MacQuisition can assist examiners in...
Analyzing the contents of RAM has been a hot button topic for some time now. It makes sense in a lot of ways, after all...
Windows 10 Jump List Forensics: When Microsoft released Windows 7, a new artifact was released to the forensic world, Jump Lists. Since that time most examiners...
With the proliferation of cheap external USB devices, it is becoming incumbent on examiners to determine if any USB attached storage has connected to the...
Next up in our Windows Forensic Essentials Blog Series is a look at Volume Shadow Copies. Looking for other blog posts in this series? We have...
This is the second post in our Windows Forensic Essentials Blog Series. Read our first post on Jump Lists. One of the most overlooked artifacts on...
Knowing specifically what a user has viewed on their computer is part of what an examiner does. Determining whether or not a user has opened...
When Microsoft released Windows 7, a new artifact was released to the forensic world, Jump Lists. Since that time most examiners have become used to...
How and where the BlackLight case is stored has a direct effect on performance. Even the fastest workstation will benefit from this simple concept of...
Necessary cookies are absolutely essential for the website to function properly. This category only includes cookies that ensures basic functionalities and security features of the website. These cookies do not store any personal information.
Any cookies that may not be particularly necessary for the website to function and is used specifically to collect user personal data via analytics, ads, other embedded contents are termed as non-necessary cookies. It is mandatory to procure user consent prior to running these cookies on your website.