Blog

Welcome to the third post in our Windows Forensic Essentials Blog Series. View our previous posts on Jump Lists and the Recycle Bin. Windows Event Logs...

This is the second post in our Windows Forensic Essentials Blog Series. Read our first post on Jump Lists. One of the most overlooked artifacts on...

Knowing specifically what a user has viewed on their computer is part of what an examiner does.  Determining whether or not a user has opened...

When Microsoft released Windows 7, a new artifact was released to the forensic world, Jump Lists.  Since that time most examiners have become used to...

How and where the BlackLight case is stored has a direct effect on performance.  Even the fastest workstation will benefit from this simple concept of...

Update: We have added instructions on how to create an encrypted backup password for an iOS 10 device with MDM profile using iTunes. iPhones and iPads being...

Last week one of our forensic analysts, Bruce Hunter, described the impact of iOS 10 on mobile forensics. In case you miss it, here is quick recap,...

The release of iPhone 7, iPhone 7 Plus, and iOS 10, brings new challenges for the digital forensic community. With the constant stream of new...

Direct physical access to evidentiary devices is not always feasible, if possible at all. It can require travel and time that examiners simply do not...

Apple has officially discontinued security updates for QuickTime on Windows, which opens the possibility for vulnerabilities. The Zero Day Initiative has already issued advisories for...